CVE-2017-6370

PoC —

CVSS 3.0

5.3 medium

EPSS

<1%p60

Published

Mar 17, 2017 (Mar 17, 2017)

Modified

Jun 17, 2026

Description

TYPO3 7.6.15 sends an http request to an index.php?loginProvider URI in cases with an https Referer, which allows remote attackers to obtain sensitive cleartext information by sniffing the network and reading the userident and username fields.

Vendors: typo3
Products: typo3
Weakness: CWE-319
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.