cbcvebase.
CVE-2009-0256
published 2009-01-22

CVE-2009-0256: Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers…

PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.79%
75.7th percentile
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.

Affected

25 ranges
VendorProductVersion rangeFixed in
typo3cms>= 4.0.0 < 4.0.104.0.10
typo3cms>= 4.1.0 < 4.1.84.1.8
typo3cms>= 4.2.0 < 4.2.44.2.4
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
typo3typo3——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.