TYPO3 is vulnerable to Insecure randomness in uniqid function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2010-3666 · ADVISORY
• TYPO3/typo3 commit 302b35e · WEB
• TYPO3/typo3 commit 352d606 · WEB
• TYPO3/typo3 commit 42324b3 · WEB
• TYPO3/typo3 commit f6d2e33 · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• TYPO3-CMS/install · PACKAGE
• security-tracker.debian.org/tracker/CVE-2010-3666 · WEB
• typo3.org/security/advisory/typo3-sa-2010-012 · WEB

typo3/cms-install のその他の脆弱性

• CVE-2024-55891中 5.3TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plain…
• CVE-2023-47126中 5.3TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the sta…
• CVE-2010-3671中 6.5TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 is open to a session fixation attack which allows remote…
• CVE-2010-5100低 3.5Multiple cross-site scripting (XSS) vulnerabilities in the Install Tool in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4…
• CVE-2009-3636中 4.3Cross-site scripting (XSS) vulnerability in the Install Tool subcomponent in TYPO3 4.0.13 and earlier, 4.1.x before 4.1.13, 4.2.x before 4.2…