CVE-2017-6370

CVE-2017-6370

This page contains facts from public vulnerability sources. Check the original advisory before updating.

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

CVSS 5.3 · Medium · EPSS 1.0%

Published

2017-03-17T17:00:00.000Z

Updated

2024-08-05T15:25:49.256Z

Stack: php

Check your server →