Unscored CVE-2014-8874 EUVD-2014-8704GHSA-f4wj-qq69-7p3q

The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, which makes it easier…

Published Dec 2, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

The ke_questionnaire extension 2.5.2 and earlier for TYPO3 uses predictable names for the questionnaire answer forms, which makes it easier for remote attackers to obtain sensitive information via a direct request.

References

20141201 [RT-SA-2014-009] Information Disclosure in TYPO3 Extension ke_questionnaire mailing-list
https://www.redteam-pentesting.de/advisories/rt-sa-2014-009
20141201 [RT-SA-2014-009] Information Disclosure in TYPO3 Extension ke_questionnaire mailing-list