Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-f777-f784-36gm: TYPO3 Security Misconfiguration in Install Tool Cookie

It has been discovered that cookies created in the Install Tool are not hardened to be submitted only via HTTP. In combination with other vulnerabilities such as cross-site scripting it can lead to hijacking an active and valid session in the Install Tool.

ghsa
#xss#vulnerability#git

TYPO3 Security Misconfiguration in Install Tool Cookie

High severity GitHub Reviewed Published Jun 7, 2024 to the GitHub Advisory Database

ghsa: Latest News

GHSA-53q7-4874-24qg: Information Disclosure Vulnerability in Privacy Center of SERVER_SIDE_FIDES_API_URL