Lucene search
GoogleOSV:GHSA-87HC-PHMJ-RHGHHistoryMay 13, 2022 - 1:46 a.m.
TYPO3 Information Disclosure Vulnerability
2022-05-1301:46:32
Google
osv.dev
10
typo3
information disclosure
vulnerability
http request
sniffing
network reading
TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.
Related
cve
cve
CVE-2017-6370
2017-03-17 17:59:00
github
github
TYPO3 Information Disclosure Vulnerability
2022-05-13 01:46:32
prion
prion
Design/Logic Flaw
2017-03-17 17:59:00
osv
osv
CVE-2017-6370
2017-03-17 17:59:00
cvelist
cvelist
CVE-2017-6370
2017-03-17 17:00:00
nvd
nvd
CVE-2017-6370
2017-03-17 17:59:00