What is GHSA-m646-h2pw-56h4?

GHSA-m646-h2pw-56h4 is a security advisory published by GitHub Security Advisories with Medium severity. Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords

Which CVE IDs does GHSA-m646-h2pw-56h4 cover?

GHSA-m646-h2pw-56h4 covers the following CVE IDs: CVE-2012-5890. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-m646-h2pw-56h4?

GHSA-m646-h2pw-56h4 affects 1 product, including: composer/sjbr/sr-feuser-register:\u003c 2.6.2.

GHSA-m646-h2pw-56h4Medium

Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords

Vendor

GitHub Security Advisories

Published

May 17, 2022

Last Modified

April 12, 2025

🔗 CVE IDs covered (1)

CVE-2012-5890 →

📋 Description

The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.

🎯 Affected products1

composer/sjbr/sr-feuser-register:< 2.6.2

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2012-5890
https://exchange.xforce.ibmcloud.com/vulnerabilities/80145
http://forge.typo3.org/projects/extension-sr_feuser_register/repository/entry/trunk/ChangeLog
http://forge.typo3.org/projects/extension-sr_feuser_register/repository/revisions/58720
https://web.archive.org/web/20120715071728/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2012-002
https://github.com/advisories/GHSA-m646-h2pw-56h4