What is GHSA-q45q-5233-229p?

GHSA-q45q-5233-229p is a security advisory published by GitHub Security Advisories with High severity. Authentication library in TYPO3 vulnerable to session fixation

Which CVE IDs does GHSA-q45q-5233-229p cover?

GHSA-q45q-5233-229p covers the following CVE IDs: CVE-2009-0256. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-q45q-5233-229p?

GHSA-q45q-5233-229p affects 3 products, including: composer/typo3/cms:\u003e= 4.0.0, \u003c= 4.0.9; composer/typo3/cms:\u003e= 4.1.0, \u003c= 4.1.7; composer/typo3/cms:\u003e= 4.2.0, \u003c= 4.2.3.

GHSA-q45q-5233-229pHigh

Authentication library in TYPO3 vulnerable to session fixation

Vendor

GitHub Security Advisories

Published

May 2, 2022

Last Modified

January 23, 2024

🔗 CVE IDs covered (1)

CVE-2009-0256 →

📋 Description

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.

🎯 Affected products3

composer/typo3/cms:>= 4.0.0, <= 4.0.9
composer/typo3/cms:>= 4.1.0, <= 4.1.7
composer/typo3/cms:>= 4.2.0, <= 4.2.3

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2009-0256
https://exchange.xforce.ibmcloud.com/vulnerabilities/48133
http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-001/
http://www.debian.org/security/2009/dsa-1711
https://web.archive.org/web/20111210005350/http://www.securityfocus.com/bid/33376
https://github.com/advisories/GHSA-q45q-5233-229p