GHSA-53mm-hx32-6475 critical
TYPO3 vulnerable to Insufficient Session Expiration
Affected range
ECOSYSTEM: introduced 3.0.0; fixed 3.0.3ECOSYSTEM: introduced 0; fixed 2.0.5>=3.0.0,<3.0.3|<2.0.5Fixed versions: 3.0.3, 2.0.5
Vulnerability intelligence Composer
derhansen/fe_change_pwd
Change password for frontend users - Plugin to enable password change for frontend users. Contains configurable password rules and password change enforcement.
Composer latest 6.0.2 GPL-2.0-or-later
Evidence path
Version, exploitation, severity
RequestGuard keeps these facts separate. A KEV match refers to a CVE, while OSV supplies the package and version match.
1
Latest version
6.0.2
No matching published advisory returned
2
Known exploitation
No KEV match
Checked by exact CVE identifier
3
Highest advisory severity
Critical
1 active advisory
Check an exact version
The registry confirms the version, then OSV checks advisories for that exact value.
Published records