CVE-2012-5890

2012-11-1721:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

Low

EPSS

0.004

Percentile

72.2%

JSON

The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.

References

forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog

forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720

typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002/

exchange.xforce.ibmcloud.com/vulnerabilities/80145