| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 6.2.0, < 6.2.26≥ 7.6.0, < 7.6.10≥ 8.0.0, < 8.2.1 | 6.2.267.6.108.2.1 |
The TYPO3 backend module stores the username of an authenticated backend user in its cache files. By guessing the file path to the cache files it is possible to receive valid backend usernames.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free