p PatchFirst

CVE-2009-0256

CVE-2009-0256

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.

EPSS 1.8% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • typo3/cms Packagist

    Affected ranges
    • ECOSYSTEM: ≥ 4.0.0, < 4.0.10

    Update to 4.0.10

  • typo3/cms Packagist

    Affected ranges
    • ECOSYSTEM: ≥ 4.1.0, < 4.1.8

    Update to 4.1.8

  • typo3/cms Packagist

    Affected ranges
    • ECOSYSTEM: ≥ 4.2.0, < 4.2.4

    Update to 4.2.4

Original sources

Check your server →