Lucene search

K
typo3TYPO3 AssociationTYPO3-EXT-SA-2020-019
HistoryNov 17, 2020 - 12:00 a.m.

Sensitive Data Exposure in extension "View frontend statistics" (view_statistics)

2020-11-1700:00:00
TYPO3 Association
typo3.org
29
sensitive data
typo3
extension
passwords
database
frontend

EPSS

0.001

Percentile

28.4%

The extension saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data (e.g. plain text passwords if ext:felogin is installed) may be saved.

EPSS

0.001

Percentile

28.4%

Related for TYPO3-EXT-SA-2020-019