Information disclosure in Stanislas Rolland Sr Feuser Register
CVE-2012-5890
The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
Vulnerability class: Information Disclosure
EPSS: 0.014 (69.1th percentile) — read the EPSS interpretation.
Affected products
- Stanislas_rolland Sr_feuser_register — versions 1.4.7, 1.6.5, 1.6.6
- Typo3
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (Patch, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (x_refsource_CONFIRM)