CVE-2020-26228

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.23 and 10.4.10 user session identifiers were stored in cleartext - without processing with additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. Update to TYPO3 versions 9.5.23 or 10.4.10 that fix the problem described.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-312

Affected software

Vendor	Product	Versions
TYPO3	TYPO3.CMS	>= 9.0.0, < 9.5.23; >= 10.0.0, < 10.4.10

References

https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-954j-f27r-cj52Third Party Advisory
https://typo3.org/security/advisory/typo3-core-sa-2020-011Vendor Advisory
https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-954j-f27r-cj52Third Party Advisory
https://typo3.org/security/advisory/typo3-core-sa-2020-011Vendor Advisory

Timeline

Published: Nov 23, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-262293.7TYPO3 is an open source PHP based web content management system. In TYPO3 from version 10.4.0, and before version 10.4.10, RSS widgets are s CVE-2020-26236.0Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Metrics Framework). Supported version CVE-2020-262305.3Radar COVID is the official COVID-19 exposure notification app for Spain. In affected versions of Radar COVID, identification and de-anonymi CVE-2020-262316.7October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-15247 (fixed in 1.0.469 an CVE-2020-262325.4Jupyter Server before version 1.0.6 has an Open redirect vulnerability. A maliciously crafted link to a jupyter server could redirect the br CVE-2020-262337.3Git Credential Manager Core (GCM Core) is a secure Git credential helper built on .NET Core that runs on Windows and macOS. In Git Credentia CVE-2020-262344.8Opencast before versions 8.9 and 7.9 disables HTTPS hostname verification of its HTTP client used for a large portion of Opencast's HTTP req CVE-2020-262355.3In Rust time crate from version 0.2.7 and before version 0.2.23, unix-like operating systems may segfault due to dereferencing a dangling po CVE-2020-262367.5In ScratchVerifier before commit a603769, an attacker can hijack the verification process to log into someone else's account on any site tha CVE-2020-262378.7Highlight.js is a syntax highlighter written in JavaScript. Highlight.js versions before 9.18.2 and 10.1.2 are vulnerable to Prototype Pollu CVE-2020-262388.1Cron-utils is a Java library to parse, validate, migrate crons as well as get human readable descriptions for them. In cron-utils before ver CVE-2020-262395.4Scratch Addons is a WebExtension that supports both Chrome and Firefox. Scratch Addons before version 1.3.2 is vulnerable to DOM-based XSS.