CVE-2009-3635

unknown
Published 2022-05-02 · Modified 2025-04-10
CVSS v3
CVSS v2
VIR risk

Description

TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

Package impact

EcosystemPackageVulnerableFixed
php Packagisttypo3/cms<=4.0.13
php Packagisttypo3/cms>=4.1.0,<4.1.134.1.13
php Packagisttypo3/cms>=4.2.0,<4.2.104.2.10
php Packagisttypo3/cms>=4.3beta1,<4.3beta24.3beta2

References

Verify integrity in audit chain (admin only). AS-IS.