[CRITICAL] TYPO3-EXT-SA-2022-016: Insufficient Session Expiration after Password Change in extension "Change password for frontend users" (fe_change_pwd)

PKSA-ky43-4yw1-6kvx CVE-2022-47406 GHSA-53mm-hx32-6475

Affected package: derhansen/fe_change_pwd

Affected version: >=3.0.0,<3.0.3|<2.0.5

Reported by:
FriendsOfPHP/security-advisories, GitHub