Description
Session fixation vulnerability in the authentication library in TYPO3 4.0.0 through 4.0.9, 4.1.0 through 4.1.7, and 4.2.0 through 4.2.3 allows remote attackers to hijack web sessions via unspecified vectors related to (1) frontend and (2) backend authentication.
Remediation
References
Related Vulnerabilities
WordPress Plugin FireDrum Email Marketing PHP Object Injection (1.47)
WordPress Plugin Social Sharing-Sassy Social Share Cross-Site Scripting (3.3.39)
TYPO3 Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-4614)
Jenkins Incorrect Authorization Vulnerability (CVE-2021-21692 )