What is GHSA-87hc-phmj-rhgh?

GHSA-87hc-phmj-rhgh is a security advisory published by GitHub Security Advisories with Medium severity. TYPO3 Information Disclosure Vulnerability

Which CVE IDs does GHSA-87hc-phmj-rhgh cover?

GHSA-87hc-phmj-rhgh covers the following CVE IDs: CVE-2017-6370. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-87hc-phmj-rhgh?

GHSA-87hc-phmj-rhgh has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-87hc-phmj-rhgh?

GHSA-87hc-phmj-rhgh affects 1 product, including: composer/typo3/cms:= 7.6.15.

GHSA-87hc-phmj-rhghMediumCVSS 5.3

TYPO3 Information Disclosure Vulnerability

Vendor

GitHub Security Advisories

Published

May 13, 2022

Last Modified

April 25, 2024

🔗 CVE IDs covered (1)

CVE-2017-6370 →

📋 Description

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

🎯 Affected products1

composer/typo3/cms:= 7.6.15

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2017-6370
https://github.com/faizzaidi/TYPO3-v7.6.15-Unencrypted-Login-Request
http://www.securityfocus.com/bid/97071
https://github.com/advisories/GHSA-87hc-phmj-rhgh