Description

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.

Remediation

References

CVE-2009-0256

Related Vulnerabilities

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1643)

MySQL CVE-2020-14656 Vulnerability (CVE-2020-14656)

Squid Improper Input Validation Vulnerability (CVE-2010-0308)

WordPress 4.0.x Cross-Domain Flash Injection Vulnerability (4.0 - 4.0.21)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-38263)

Severity

High

Classification

CVE-2009-0256 CWE-287

Tags

Missing Update Known Vulnerabilities