CVE-2024-55891
Last modified
CVE-2024-55891 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. EPSS estimates a 0.31% chance of exploitation in the next 30 days.
Description
TYPO3 is a free and open source Content Management Framework. It has been discovered that the install tool password has been logged as plaintext in case the password hashing mechanism used for the password was incorrect. Users are advised to update to TYPO3 versions 13.4.3 ELTS which fixes the problem described. There are no known workarounds for this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Typo3 | Typo3 | 13.4.2 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-55891?
How severe is CVE-2024-55891?
How do I fix CVE-2024-55891?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-55886OpenSearch Data Prepper is a component of the OpenSearch pro…6.9
- CVE-2024-55887Ucum-java is a FHIR Java library providing UCUM Services. In…8.6
- CVE-2024-55888Hush Line is an open-source whistleblower management system.…7.1
- CVE-2024-55889phpMyFAQ is an open source FAQ web application. Prior to ver…7.2
- CVE-2024-5589A vulnerability was found in Netentsec NS-ASG Application Se…9.8
- CVE-2024-55890D-Tale is a visualizer for pandas data structures. Prior to …6.9
- CVE-2024-55892TYPO3 is a free and open source Content Management Framework…6.1
- CVE-2024-55893TYPO3 is a free and open source Content Management Framework…4.3
- CVE-2024-55894TYPO3 is a free and open source Content Management Framework…5.4
- CVE-2024-55895IBM InfoSphere Information Server 11.7 could allow a remote …5.3
- CVE-2024-55896IBM PowerHA SystemMirror for i 7.4 and 7.5 contains improper…5.4
- CVE-2024-55897IBM PowerHA SystemMirror for i 7.4 and 7.5 does not set th…4.3
Are you affected by CVE-2024-55891?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST