GHSA-wj85-rg5g-v8jm: TYPO3 Information Disclosure in User Authentication

May 30, 2024

It has been discovered that login failures have been logged on the default stream with log level “warning” including plain-text user credentials.

References

github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2019-05-07-5.yaml
github.com/TYPO3-CMS/core
github.com/TYPO3-CMS/core/commit/ac0565b7a539398a07adf21f04f85cd2574817d2
github.com/advisories/GHSA-wj85-rg5g-v8jm
typo3.org/security/advisory/typo3-core-sa-2019-010

Code Behaviors & Features

Detect and mitigate GHSA-wj85-rg5g-v8jm with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →