| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms-core | ≥ 8.0.0, < 8.7.25≥ 9.0.0, < 9.5.6 | 8.7.259.5.6 |
When users change their password existing sessions for that particular user account are not revoked. A valid backend or frontend user account is required in order to make use of this vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free