GHSA-r9vc-jfmh-6j48 — TYPO3 frontend login vulnerable to Session Fixation

The advisory, in context

It has been discovered that TYPO3 is susceptible to session fixation. If a user authenticates while anonymous session data is present, the session id is not changed. This makes it possible for attackers to generate a valid session id, trick users into using this session id (e.g. by leveraging a different Cross-Site Scripting vulnerability) and then maybe getting access to an authenticated session.

Affected packages

Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.

typo3/cms Packagist

Ecosystem versions

From 6.2.0 before 6.2.14

Fixed in 6.2.14

15 explicitly affected versions

6.2.0, 6.2.1, 6.2.10, 6.2.10-rc1, 6.2.11, 6.2.12, 6.2.13, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.2.6, 6.2.7, 6.2.8, 6.2.9

View affected-version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "6.2.0"
        },
        {
          "fixed": "6.2.14"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "6.2.0",
    "6.2.1",
    "6.2.10",
    "6.2.10-rc1",
    "6.2.11",
    "6.2.12",
    "6.2.13",
    "6.2.2",
    "6.2.3",
    "6.2.4",
    "6.2.5",
    "6.2.6",
    "6.2.7",
    "6.2.8",
    "6.2.9"
  ]
}

typo3/cms Packagist

Ecosystem versions

From 7.0.0 before 7.3.1

Fixed in 7.3.1

6 explicitly affected versions

7.0.0, 7.0.1, 7.0.2, 7.1.0, 7.2.0, 7.3.0

View affected-version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "7.0.0"
        },
        {
          "fixed": "7.3.1"
        }
      ],
      "type": "ECOSYSTEM"
    }
  ],
  "versions": [
    "7.0.0",
    "7.0.1",
    "7.0.2",
    "7.1.0",
    "7.2.0",
    "7.3.0"
  ]
}

Set up in your agent.

Investigate in your agent.

TYPO3 frontend login vulnerable to Session Fixation

The advisory, in context

Affected packages

References