CVE-2010-1022 TYPO3 Authentication Bypass via Salted user password hashes extension
HighCVSS 7.5
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| typo3/cms-saltedpasswords(Packagist) | < 0.2.13 | 0.2.13 |
| marcus krause t3sec saltedpw | <= 0.2.12 | No fix listed |
| marcus krause t3sec saltedpw | = 0.2.8 | No fix listed |
| marcus krause t3sec saltedpw | = 0.2.9 | No fix listed |
| marcus krause t3sec saltedpw | = 0.2.10 | No fix listed |
| marcus krause t3sec saltedpw | = 0.2.11 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com product
- web.archive.org
- web.archive.org
- typo3.org patch
- typo3.org patch vendor-advisory
- github.com
- 38992 third-party-advisory vendor-advisory
- 38799 vdb-entry