VULNERABILITY INTELLIGENCE

CVE-2021-32767

CVSS score5.3 MEDIUM

EPSS probability0.83%

CISA KEVNot currently listed

Published2021-07-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

TYPO3 is an open source PHP based web content management system. In versions 9.0.0 through 9.5.27, 10.0.0 through 10.4.17, and 11.0.0 through 11.3.0, user credentials may been logged as plain-text. This occurs when explicitly using log level debug, which is not the default configuration. TYPO3 versions 9.5.28, 10.4.18, 11.3.1 contain a patch for this vulnerability.

Weakness classification

security-advisories@github.com: CWE-532
nvd@nist.gov: CWE-532

Primary references

security-advisories@github.com — Third Party Advisory
security-advisories@github.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory