Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending ...

CVE-2020-28917 · published 5 years ago
Summary

An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data (e.g., cleartext passwords if ext:felogin is ...

What to do
  • Update view_frontend_statistics_project view_frontend_statistics to version 2.0.1 or later.
Affected software
VendorProductAffected versions
view_frontend_statistics_project view_frontend_statistics < 2.0.1
cpe:2.3:a:view_frontend_statistics_project:view_frontend_statistics:*:*:*:*:*:typo3:*:*
Original advisory text
An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending ...
An issue was discovered in the view_statistics (aka View frontend statistics) extension before 2.0.1 for TYPO3. It saves all GET and POST data of TYPO3 frontend requests to the database. Depending on the extensions used on a TYPO3 website, sensitive data (e.g., cleartext passwords if ext:felogin is installed) may be saved.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-312Cleartext Storage of Sensitive Information
Timeline
Published18 Nov 2020
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2020-28917 · NVD
Track software like this
Free during beta