Read the docs
TI-2012-04915 Aliases CVE-2012-5890GHSA-m646-h2pw-56h4

The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3…

Priority LOW 26CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and GitHub. Impact type from CWE-200.

Summary

The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.

Why it matters now

EPSS 0.01369 72nd percentileScored 2026-11-07
Fix Fixed sjbr/sr-feuser-register (Packagist): 2.6.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
—sjbr/sr-feuser-register (Packagist)before 2.6.22.6.2Patch availableGHSA-m646-h2pw-56h4
  • — Vendor— Affected all versions Fixed in — No fix listed CNA
  • sjbr/sr-feuser-register (Packagist) Vendor— Affected before 2.6.2 Fixed in 2.6.2 Patch available GHSA-m646-h2pw-56h4

CPE configurations NVD · 35

CPEVersionsRoleVendor
cpe:2.3:a:stanislas_rolland:sr_feuser_register:*:*:*:*:*:*:*:*up to 2.6.1VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.4.7:*:*:*:*:*:*:*1.4.7VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.5:*:*:*:*:*:*:*1.6.5VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.6:*:*:*:*:*:*:*1.6.6VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.7:*:*:*:*:*:*:*1.6.7VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.8:*:*:*:*:*:*:*1.6.8VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.0.0:*:*:*:*:*:*:*2.0.0VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.1.0:*:*:*:*:*:*:*2.1.0VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.0:*:*:*:*:*:*:*2.2.0VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.1:*:*:*:*:*:*:*2.2.1VulnerableStanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:*:*:*:*:*:*:*:* Versions up to 2.6.1 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.4.7:*:*:*:*:*:*:* Versions 1.4.7 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.5:*:*:*:*:*:*:* Versions 1.6.5 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.6:*:*:*:*:*:*:* Versions 1.6.6 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.7:*:*:*:*:*:*:* Versions 1.6.7 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:1.6.8:*:*:*:*:*:*:* Versions 1.6.8 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.0.0:*:*:*:*:*:*:* Versions 2.0.0 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.0:*:*:*:*:*:*:* Versions 2.2.0 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.1:*:*:*:*:*:*:* Versions 2.2.1 Vulnerable ·Stanislas Rolland
Show 25 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.3:*:*:*:*:*:*:*2.2.3VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.4:*:*:*:*:*:*:*2.2.4VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.5:*:*:*:*:*:*:*2.2.5VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.0:*:*:*:*:*:*:*2.3.0VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.3:*:*:*:*:*:*:*2.3.3VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.4:*:*:*:*:*:*:*2.3.4VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.5:*:*:*:*:*:*:*2.3.5VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.6:*:*:*:*:*:*:*2.3.6VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.4:*:*:*:*:*:*:*2.4VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5:*:*:*:*:*:*:*2.5VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.1:*:*:*:*:*:*:*2.5.1VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.2:*:*:*:*:*:*:*2.5.2VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.3:*:*:*:*:*:*:*2.5.3VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.4:*:*:*:*:*:*:*2.5.4VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.5:*:*:*:*:*:*:*2.5.5VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.6:*:*:*:*:*:*:*2.5.6VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.11:*:*:*:*:*:*:*2.5.11VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.12:*:*:*:*:*:*:*2.5.12VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.13:*:*:*:*:*:*:*2.5.13VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.14:*:*:*:*:*:*:*2.5.14VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.15:*:*:*:*:*:*:*2.5.15VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.16:*:*:*:*:*:*:*2.5.16VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.17:18:*:*:*:*:*:*2.5.17 18VulnerableStanislas Rolland
cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.19:*:*:*:*:*:*:*2.5.19VulnerableStanislas Rolland
cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:*not specified by NVDRunning onTYPO3
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.3:*:*:*:*:*:*:* Versions 2.2.3 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.4:*:*:*:*:*:*:* Versions 2.2.4 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.2.5:*:*:*:*:*:*:* Versions 2.2.5 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.0:*:*:*:*:*:*:* Versions 2.3.0 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.3:*:*:*:*:*:*:* Versions 2.3.3 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.4:*:*:*:*:*:*:* Versions 2.3.4 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.5:*:*:*:*:*:*:* Versions 2.3.5 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.3.6:*:*:*:*:*:*:* Versions 2.3.6 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5:*:*:*:*:*:*:* Versions 2.5 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.1:*:*:*:*:*:*:* Versions 2.5.1 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.2:*:*:*:*:*:*:* Versions 2.5.2 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.3:*:*:*:*:*:*:* Versions 2.5.3 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.4:*:*:*:*:*:*:* Versions 2.5.4 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.5:*:*:*:*:*:*:* Versions 2.5.5 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.6:*:*:*:*:*:*:* Versions 2.5.6 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.11:*:*:*:*:*:*:* Versions 2.5.11 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.12:*:*:*:*:*:*:* Versions 2.5.12 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.13:*:*:*:*:*:*:* Versions 2.5.13 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.14:*:*:*:*:*:*:* Versions 2.5.14 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.15:*:*:*:*:*:*:* Versions 2.5.15 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.16:*:*:*:*:*:*:* Versions 2.5.16 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.17:18:*:*:*:*:*:* Versions 2.5.17 18 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:stanislas_rolland:sr_feuser_register:2.5.19:*:*:*:*:*:*:* Versions 2.5.19 Vulnerable ·Stanislas Rolland
  • cpe:2.3:a:typo3:typo3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·TYPO3

Remediation

  • Fix · GHSA-m646-h2pw-56h4 sjbr/sr-feuser-register (Packagist) Fixed in 2.6.2 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5890
  2. 2026-10-03 Alias added: GHSA-m646-h2pw-56h4

References

Patch 1

Advisory 1

Other 4

  • TI-2009-01199 Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3… CVSS 2.0MEDIUM 4.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences