Stefan Bürk

**Name of the Vulnerable Software and Affected Versions** The product name cannot be determined (affected versions not specified) **Description** The extension forces empty frontend-group and subpage-inheritance restrictions onto page records during indexer sub-requests. This forged state is persisted into the shared rootline cache, which allows anonymous visitors to bypass `extendToSubpages`-inherited access restrictions on cached pages. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TYPO3 CMS version 14.2.0 **Description** Changing backend users passwords through the user settings module causes the cleartext password to be stored in the `uc` and `user settings` fields of the `be users` database table. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.