VulnerableCode Package Details - pkg:composer/typo3/cms-core@7.6.51

Search for packages

Vulnerability	Summary	Fixed by
VCID-rmnv-emnu-6bfy Aliases: CVE-2021-32767 GHSA-34fr-fhqr-7235	Information Disclosure in User Authentication > ### Meta > * CVSS: `AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that user credentials have been logged as plaintext when explicitly using log level debug, which is not the _default_ configuration. ### Solution Update to TYPO3 versions 7.6.52 ELTS, 8.7.41 ELTS, 9.5.28, 10.4.18, 11.3.1 that fix the problem described. ### Credits Thanks to Ingo Schmitt who reported this issue, and to TYPO3 core & security team member Benni Mack who fixed the issue. ### References * [TYPO3-CORE-SA-2021-012](https://typo3.org/security/advisory/typo3-core-sa-2021-012)	7.6.52 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 8.7.41 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 9.5.28 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 10.4.18 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} 11.3.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-rmnv-emnu-6bfy
Aliases:
CVE-2021-32767
GHSA-34fr-fhqr-7235

Information Disclosure in User Authentication > ### Meta > * CVSS: `AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:F/RL:O/RC:C` (4.9) ### Problem It has been discovered that user credentials have been logged as plaintext when explicitly using log level debug, which is not the _default_ configuration. ### Solution Update to TYPO3 versions 7.6.52 ELTS, 8.7.41 ELTS, 9.5.28, 10.4.18, 11.3.1 that fix the problem described. ### Credits Thanks to Ingo Schmitt who reported this issue, and to TYPO3 core & security team member Benni Mack who fixed the issue. ### References * [TYPO3-CORE-SA-2021-012](https://typo3.org/security/advisory/typo3-core-sa-2021-012)

7.6.52
Affected by 1 other vulnerability.

8.7.41
Affected by 1 other vulnerability.

9.5.28
Affected by 3 other vulnerabilities.

10.4.18
Affected by 1 other vulnerability.

11.3.1
Affected by 1 other vulnerability.

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Vulnerability

Summary

Aliases

This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-07-03T13:56:06.938567+00:00	GitLab Importer	Fixing	VCID-v83x-2hx7-yycg	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21339.yml	36.1.3
2025-07-03T13:56:06.661413+00:00	GitLab Importer	Fixing	VCID-d42j-347n-e7en	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21338.yml	36.1.3
2025-07-03T13:56:06.308962+00:00	GitLab Importer	Fixing	VCID-ekj9-nhu4-93cc	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-21370.yml	36.1.3
2025-07-01T18:11:46.215729+00:00	GitLab Importer	Affected by	VCID-rmnv-emnu-6bfy	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2021-32767.yml	36.1.3
2025-07-01T12:19:08.689182+00:00	GithubOSV Importer	Fixing	VCID-d42j-347n-e7en	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/03/GHSA-4jhw-2p6j-5wmp/GHSA-4jhw-2p6j-5wmp.json	36.1.3
2025-07-01T12:19:06.485842+00:00	GithubOSV Importer	Fixing	VCID-v83x-2hx7-yycg	https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/03/GHSA-qx3w-4864-94ch/GHSA-qx3w-4864-94ch.json	36.1.3