CVE-2022-36106 — Improper Authentication in CMS

CWE-287 — Improper AuthenticationCWE-209 — Information Exposure via Error Message5 documents4 sources
Severity
5.4MEDIUMNVD
EPSS
0.2%
top 58.10%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Typo3 CMSTypo3 Cms-coreTypo3
Timeline
PublishedSep 13
Latest updateJun 6

Description

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the expiration time of a password reset link for TYPO3 backend users has never been evaluated. As a result, a password reset link could be used to perform a password reset even if the default expiry time of two hours has been exceeded. Update to TYPO3 version 10.4.32 or 11.5.16 that fix the problem. There are no known workarounds for this issue.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages4 packages

▶Packagisttypo3/cms10.4.0 — 10.4.32+1
▶Packagisttypo3/cms-core10.4.0 — 10.4.32+1
▶NVDtypo3/typo310.0.0 — 10.4.31+1
▶CVEListV5typo3/typo3>= 10.4.0, < 10.4.32, >= 11.0.0, < 11.5.16+1

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

4
GHSA
Argo-cd authenticated users can enumerate clusters by name↗2024-06-06
▶
OSV
TYPO3 CMS missing check for expiration time of password reset token for backend users↗2022-09-16
▶
GHSA
TYPO3 CMS missing check for expiration time of password reset token for backend users↗2022-09-16
▶
CVEList
Missing check for expiration time of password reset token in TYPO3↗2022-09-13
▶
CVE-2022-36106 — Improper Authentication in Typo3 CMS | cvebase