CVE-2024-55891CWE-532

Information Disclosure via Exception Handling/Logger in TYPO3

Low · published January 14, 2025

CVSS v3.1
3.1
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the problem described. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00328 · 24.7th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-01-14T19:11Z
EPSS history
Timeline
  • 14 JAN 19:11Z
    Information Disclosure via Exception Handling/Logger in TYPO3
    cvelistv5