Merge pull request #740 from derhansen/master

Add CVE-2025-24856
FriendsOfPHP · Jan 28, 2025 · 320853c · 320853c
2 parents 034e882 + f953dc8
commit 320853c
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/causal/oidc/CVE-2025-24856.yaml b/causal/oidc/CVE-2025-24856.yaml
@@ -0,0 +1,8 @@
+title: 'TYPO3-EXT-SA-2025-001: Account Takeover in extension "OpenID Connect Authentication" (oidc)'
+link: https://typo3.org/security/advisory/typo3-ext-sa-2025-001
+cve: CVE-2025-24856
+branches:
+    main:
+        time: 2025-01-27 18:56:00
+        versions: ['>=3.0.0', '<4.0.0']
+reference: composer://causal/oidc