Skip to content
Snippets Groups Projects
Commit f644cd72 authored by Frank Naegler's avatar Frank Naegler Committed by Oliver Hader
Browse files

[SECURITY] Destroy sessions on password change 

On DataHandler update or when updating a users
password via EXT:felogin, all existing
sessions are destroyed except for the current
session.

Resolves: #87298
Releases: master, 9.5, 8.7
Security-Commit: df7c0dbcf73be20e5ae9d4cf03b82c8326c9fccc
Security-Bulletin: TYPO3-CORE-SA-2019-011
Change-Id: Iff673d2ab774dde0f116c4bc9040d40374492a7a
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/60704


Tested-by: default avatarOliver Hader <oliver.hader@typo3.org>
Reviewed-by: default avatarOliver Hader <oliver.hader@typo3.org>
parent 055bef5d
No related merge requests found
Hide whitespace changes
Inline Side-by-side
Showing
with 252 additions and 0 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment