GHSA-87hc-phmj-rhgh

Source

https://github.com/advisories/GHSA-87hc-phmj-rhgh

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-87hc-phmj-rhgh/GHSA-87hc-phmj-rhgh.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-87hc-phmj-rhgh

Aliases

CVE-2017-6370

Published

2022-05-13T01:46:32Z

Modified

2024-04-25T21:58:41.582505Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator

Summary

TYPO3 Information Disclosure Vulnerability

Details

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

Database specific

{
    "nvd_published_at": "2017-03-17T17:59:00Z",
    "cwe_ids": [
        "CWE-319"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2024-04-25T21:29:41Z"
}

GHSA-87hc-phmj-rhgh

Affected packages

Packagist / typo3/cms

Package

Affected ranges

Affected versions

7.*