CVE-2020-28917

CVE-2020-28917 affects the TYPO3 view_statistics extension prior to version 2.0.1. The flaw stores all GET and POST data of TYPO3 frontend requests in the database, potentially exposing sensitive information (e.g., cleartext passwords when ext:felogin is installed). The root cause is the unintend...