Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:typo3:14.2.0:*:*:*:*:*:*:*

part: a version: 14.2.0 update: *

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductTypo3 (e0e75c36-ce92-5448-bdce-8b59acd8c849)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/typo3/typo3 purl2cpe 2026-06-01 10:16:08.620923
pkg:typo3/typo3.cms.git purl2cpe 2026-06-01 10:16:08.620925

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-6553 vulnerable 2026-06-08 08:07:04.884503 TYPO3 CMS Stores Cleartext Password in User Settings Module
Changing backend users' passwords via the user settings module results in storing the cleartext password in the uc and user_settings fields of the be_users database table. This issue affects TYPO3 CMS version 14.2.0.
Published: 2026-04-21T10:04:02.525Z
Updated: 2026-04-21T13:20:23.515Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.