CVE-2012-5890: The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attacke...

Security readout for executives and security teams

CVE-2012-5890 is a credential disclosure flaw in the TYPO3 Front End User Registration extension, sr_feuser_register, before version 2.6.2. A remote attacker could obtain usernames and passwords through the edit perspective or autologin feature. No source bundle evidence shows active exploitation. Exposure is likely limited to TYPO3 installations that installed sr_feuser_register versions earlier than 2.6.2, especially where the edit perspective or autologin feature is reachable from the public site. Treat as high priority for legacy TYPO3 estates because the reported impact is credential exposure. Prioritize internet-facing systems first. Urgency is lower where the extension is absent, already updated, or not reachable publicly. Mitigation focus: Inventory TYPO3 sites for the sr_feuser_register extension.; Upgrade sr_feuser_register to 2.6.2 or later where present.; Check TYPO3 extension security bulletin guidance before changing production systems..

Prepared

Jun 24, 2026, 12:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.