GHSA-m96r-7vqm-j95g
GHSA-m96r-7vqm-j95g · Typo3 Information Disclosure in User Authentication
This page contains facts from public vulnerability sources. Check the original advisory before updating.
It has been discovered that login failures have been logged on the default stream with log level "warning" including plain-text user credentials.
Fix available
- Published
- Updated
Stack: php
Affected products and versions
typo3/cms Packagist
- Versions
- v9.0.0
- v9.1.0
- v9.2.0
- v9.2.1
- v9.3.0
- v9.3.1
- v9.3.2
- v9.3.3
- v9.4.0
- v9.5.0
- v9.5.1
- v9.5.2
- v9.5.3
- v9.5.4
- v9.5.5
- Affected ranges
- ECOSYSTEM: ≥ 9.0.0, < 9.5.6
Update to 9.5.6