TYPO3 is vulnerable to insecure randomness during hash generation in forgot password function

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2010-3670 · ADVISORY
• TYPO3/typo3 commit 09ab776 · WEB
• TYPO3/typo3 commit c03e944 · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• TYPO3-CMS/frontend · PACKAGE
• security-tracker.debian.org/tracker/CVE-2010-3670 · WEB
• typo3.org/security/advisory/typo3-sa-2010-012 · WEB

typo3/cms-frontend のその他の脆弱性

• CVE-2010-3667中 5.3TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element.
• CVE-2010-5098低 3.5Cross-site scripting (XSS) vulnerability in the FORM content object in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5…
• CVE-2010-5097低 2.6Cross-site scripting (XSS) vulnerability in the click enlarge functionality in TYPO3 4.3.x before 4.3.9 and 4.4.x before 4.4.5 when the cach…