An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data (e.g., cleartext passwords if ext:felogin is installed) may be saved.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2020-11-18T08:16:34

Updated: 2024-08-04T16:40:59.945Z

Reserved: 2020-11-18T00:00:00

Link: CVE-2020-28917

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-11-18T09:15:11.867

Modified: 2024-11-21T05:23:17.440

Link: CVE-2020-28917

cve-icon Redhat

No data.