CVE-2017-6370

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-6370
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6370.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2017-6370
Aliases
Published
2017-03-17T17:59:00Z
Modified
2026-08-27T08:19:16Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

References

Affected packages

Git / github.com/TYPO3/typo3

Affected ranges

Type
GIT
Repo
https://github.com/TYPO3/typo3
Events
Introduced
83c94ad5ee39aa4faeebfdd8d0eb66a7450f2ab1
Last Affected
83c94ad5ee39aa4faeebfdd8d0eb66a7450f2ab1
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:typo3:typo3:7.6.15:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "7.6.15"
        },
        {
            "last_affected": "7.6.15"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

7.*
7.6.15
Other
TYPO3_7-6-15

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6370.json"

Git / github.com/typo3/typo3

Affected ranges

Type
GIT
Repo
https://github.com/typo3/typo3
Events
Introduced
83c94ad5ee39aa4faeebfdd8d0eb66a7450f2ab1
Last Affected
83c94ad5ee39aa4faeebfdd8d0eb66a7450f2ab1
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:typo3:typo3:7.6.15:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "7.6.15"
        },
        {
            "last_affected": "7.6.15"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

7.*
7.6.15
Other
TYPO3_7-6-15

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6370.json"