PT-2024-40439 · Packagist · Typo3/Cms

Published 2024-06-05 · Updated 2024-06-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned, use: (affected versions not specified)

Description A security issue has been found where session data of authenticated frontend users is not properly cleared during the logout process. Instead, the session data is transformed into an anonymous user session, allowing the next user of the same client application to access the previous session data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-QR5F-6FCV-W69Q

Affected Products

Typo3/Cms

References · 4

• https://osv.dev/vulnerability/GHSA-qr5f-6fcv-w69q · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms/2019-06-25-3.yaml · Note
• https://github.com/TYPO3/typo3 · Note
• https://typo3.org/security/advisory/typo3-core-sa-2019-018 · Note