Session fixation vulnerability in the authentication library in TYPO3 4.0.0 up to and including 4.0.9, 4.1.0 up to and including 4.1.7, and 4.2.0 up to and including 4.2.3 allows remote malicious users to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
typo3 typo3 4.0.4 |
||
typo3 typo3 4.0.5 |
||
typo3 typo3 4.1.0 |
||
typo3 typo3 4.1.1 |
||
typo3 typo3 4.2.1 |
||
typo3 typo3 4.2.2 |
||
typo3 typo3 4.0.2 |
||
typo3 typo3 4.0.3 |
||
typo3 typo3 4.1.6 |
||
typo3 typo3 4.1.7 |
||
typo3 typo3 4.2.0 |
||
typo3 typo3 4.0 |
||
typo3 typo3 4.0.1 |
||
typo3 typo3 4.0.8 |
||
typo3 typo3 4.0.9 |
||
typo3 typo3 4.1.4 |
||
typo3 typo3 4.1.5 |
||
typo3 typo3 4.0.6 |
||
typo3 typo3 4.0.7 |
||
typo3 typo3 4.1.2 |
||
typo3 typo3 4.1.3 |
||
typo3 typo3 4.2.3 |
Vulmon