GHSA-mh3r-6cp5-hc2j
GHSA-mh3r-6cp5-hc2j · Authentication Bypass in TYPO3 Frontend
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Due to late TCA initialization the authentication service fails to restrict frontend user according to the validation rules. Therefore it is possible to authenticate restricted (e.g. disabled) frontend users.
CVSS 5.4 · Medium · Fix available
- Published
- Updated
Stack: php
Affected products and versions
typo3/cms Packagist
- Versions
- 8.2.0
- 8.2.1
- 8.3.0
- 8.3.1
- 8.4.0
- 8.4.1
- 8.5.0
- 8.5.1
- 8.6.0
- Affected ranges
- ECOSYSTEM: ≥ 8.2.0, < 8.6.1
Update to 8.6.1