| Package | Affected versions | Patched versions |
|---|---|---|
| typo3/cms | ≥ 6.2.0, < 6.2.14≥ 7.0.0, < 7.3.1 | 6.2.147.3.1 |
The backend login has a basic brute force protection implementation which pauses for 5 seconds if wrong credentials are given. This pause however could be bypassed by forging a special request, making brute force attacks on backend editor credentials more feasible.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free