GHSA-cgr9-h9qq-x9fx

TYPO3 Authentication Bypass via Salted user password hashes extension

Source: GitHub Advisory Database (reviewed) High CVE-2010-1022

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	typo3/cms-saltedpasswords	< 0.2.13	0.2.13

Details

As written in the advisory (Markdown source, shown as plain text).

Withdrawn: `typo3/cms-saltedpasswords` is not the correct package. See: https://github.com/github/advisory-database/pull/3488 The TYPO3 Security - Salted user password hashes (t3sec_saltedpw) extension before 0.2.13 for TYPO3 allows remote attackers to bypass authentication via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2010-1022 advisory
https://github.com/TYPO3-CMS/saltedpasswords package
https://web.archive.org/web/20101125125343/http://secunia.com/advisories/38992 web
https://web.archive.org/web/20200228221050/http://www.securityfocus.com/bid/38799 web
http://typo3.org/extensions/repository/view/t3sec_saltedpw/0.2.13 web
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-006 web