CVE-2017-6370

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive…

published March 17, 2017

CVSS
—
EPSS
1%
Percentile
62.1
In the wild
Unconfirmed
What it is

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00987 · 62.1th percentile
Published
2017-03-17T17:00Z
EPSS history
Timeline
  • 17 MAR 17:00Z
    TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive…
    cvelistv5