CVE-2017-6370

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive…

published March 17, 2017

CVSS
—
EPSS
1%
Percentile
61.9
In the wild
Unconfirmed
What it is

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00987 · 61.9th percentile
Published
2017-03-17T17:00Z
EPSS history
Timeline
  • 17 MAR 17:00Z
    TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive…
    cvelistv5