-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| typo3/cms | composer | >= 9.0.0, < 9.5.6 | 9.5.6 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper logging of credentials during failed authentication attempts. The advisory specifically mentions the authentication component (ext:core) and logging mechanism. TYPO3's authentication framework uses AbstractUserAuthentication for login processes. The method responsible for logging failed attempts would naturally contain the credential logging logic. The patch changed the log level from warning to debug, indicating the original logging call was made at an inappropriate severity level in this class.