Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-47127

TYPO3 is an open source PHP based web content management system released under the GNU GPL. In typo3 installations there are always at least two different sites. Eg. first.example.org and second.example.com. In affected versions a session cookie generated for the first site can be reused on the second site without requiring additional authentication. This vulnerability has been addressed in versions 8.7.55, 9.5.44, 10.4.41, 11.5.33, and 12.4.8. Users are advised to upgrade. There are no known workarounds for this vulnerability.

Published

2023-11-14T20:15:08.230

Last Modified

2024-11-21T08:29:50.073

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.2 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-302
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application typo3 typo3 < 8.7.55 Yes
Application typo3 typo3 < 9.5.44 Yes
Application typo3 typo3 < 10.4.41 Yes
Application typo3 typo3 < 11.5.33 Yes
Application typo3 typo3 < 12.4.8 Yes
References