CVE-2010-3670

TYPO3 prior to 4.3.4 and 4.4.x prior to 4.4.1 contains insecure randomness during the generation of a hash in the forgot‑password function, enabling potential predictability of hashes as described in multiple sources (GHSA/NVD/CNVD/etc.). The vulnerability affects the forgot-password hashing proc...