CVE-2022-23502

Name of the Vulnerable Software and Affected Versions TYPO3 versions prior to 10.4.33 TYPO3 versions prior to 11.5.20 TYPO3 versions prior to 12.1.1

Description The issue concerns the password recovery functionality in TYPO3, an open source PHP based web content management system. When users reset their password, existing sessions for that particular user account were not revoked, affecting both frontend and backend user sessions.

Recommendations Update to version 10.4.33 to resolve the issue. Update to version 11.5.20 to resolve the issue. Update to version 12.1.1 to resolve the issue.