Vulnerability · Published Sep 13, 2022 · Assigned by GitHub_M

CVE-2022-36106Missing check for expiration time of password reset token in TYPO3

Medium 5.4

In plain English

A medium-severity improper authentication in typo3 from TYPO3. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.4Medium

Exploit odds (30 days)0.9%top 38.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

TYPO3 is an open source PHP based web content management system released under the GNU GPL. It has been discovered that the expiration time of a password reset link for TYPO3 backend users has never been evaluated. As a result, a password reset link could be used to perform a password reset even if the default expiry time of two hours has been exceeded. Update to TYPO3 version 10.4.32 or 11.5.16 that fix the problem. There are no known workarounds for this issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	typo3/cms	10.4.32	GHSA-5959-4x58-r8c2
Packagist	typo3/cms	11.5.16	GHSA-5959-4x58-r8c2
Packagist	typo3/cms-core	10.4.32	GHSA-5959-4x58-r8c2
Packagist	typo3/cms-core	11.5.16	GHSA-5959-4x58-r8c2

Affected products (as reported)

Vendor	Product	Versions
TYPO3	typo3	>= 10.4.0, < 10.4.32>= 11.0.0, < 11.5.16

Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

References

https://github.com/TYPO3/typo3/security/advisories/GHSA-5959-4x58-r8c2 x_refsource_CONFIRM
https://github.com/TYPO3/typo3/commit/56af2bd3a432156c30af9be71c9d6f7ef3a6159a x_refsource_MISC
https://typo3.org/security/advisory/typo3-core-sa-2022-008 x_refsource_MISC