CVE-2022-47406

An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3

Medium · published December 14, 2022

CVSS v3.1
5.4
EPSS
0%
Percentile
39.7
In the wild
Unconfirmed
What it is

An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3. The extension fails to revoke existing sessions for the current user when the password has been changed.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AC:L/AV:N/A:N/C:L/I:L/PR:L/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00470 · 39.7th percentile
Published
2022-12-14T00:00Z
EPSS history
Timeline
  • 14 DEC 00:00Z
    An issue was discovered in the fe_change_pwd (aka Change password for frontend users) extension before 2.0.5, and 3.x before 3.0.3, for TYPO3
    cvelistv5