Severity
- CVSS 3.x
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/derhansen/fe_change_pwd ↗ | |
| All commits before 651b043595207b7ccceee4dc32336b4b0869bfe7 | 651b043595207b7ccceee4dc32336b4b0869bfe7 |
| 725a8f2e6ad86b4842eba106685374c9a34806a5 to before 49cc0fc3e7f7a80bcb0cc2297f9b73b6cca114f9 | 49cc0fc3e7f7a80bcb0cc2297f9b73b6cca114f9 |
Also listed as affected (24)
| |
Description
An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existing sessions for the current user when the password has been changed.