CVE-2022-47406
CVE-2022-47406
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existing sessions for the current user when the password has been changed.
CVSS 5.4 · Medium · EPSS 0.5% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: < 2.0.5
Update to 2.0.5
typo3/cms Packagist
- Affected ranges
- ECOSYSTEM: ≥ 3.0.0, < 3.0.3
Update to 3.0.3
derhansen/fe_change_pwd Packagist
- Versions
- 3.0.0
- 3.0.1
- 3.0.2
- Affected ranges
- ECOSYSTEM: ≥ 3.0.0, < 3.0.3
Update to 3.0.3
derhansen/fe_change_pwd Packagist
- Versions
- 1.0.0
- 1.0.1
- 1.1.0
- 1.2.0
- 1.2.1
- 1.2.2
- 1.2.3
- 1.2.4
- 1.2.5
- 1.2.6
- 1.2.7
- 1.3.0
- 1.4.0
- 1.4.1
- 1.5.0
- 1.5.1
- 1.5.2
- 2.0.0
- 2.0.1
- 2.0.2
- 2.0.3
- 2.0.4
- Affected ranges
- ECOSYSTEM: < 2.0.5
Update to 2.0.5