← Database

CVE-2009-0256

HIGH CVSS: 7.5 Published: 2009-01-22 Modified: 2026-06-16

Description

Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.

Affected Platforms

Typo3 Typo3

Weakness Type

CWE-287

References