Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47334

HistoryJun 04, 2024 - 5:12 a.m.

Information Disclosure

2024-06-0405:12:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2

vulnerability

login failures

warning level

debug level

plain text

credential information

software

7 High

AI Score

Confidence

High

typo3/cms-core is vulnerable to Information Disclosure. The vulnerability is due to login failures being logged at the “warning” level instead of the “debug” level, which exposes plain text credential information.

7 High

AI Score

Confidence

High