---
title: "TYPO3-SA-2010-016: TYPO3 Security Bulletin"
url: "https://news.typo3.com/security/advisory/typo3-sa-2010-016"
description: It has been discovered that the extension mm_forum (mm_forum) is vulnerable to Information Disclosure.
image: "https://news.typo3.com/_assets/d1e01514e4c4a5b3147940fa2ec50682/Images/og-image-news.jpg"
date: 2026-06-11
modified: 2026-06-11
categories:
  - Security
---

# TYPO3-SA-2010-016: TYPO3 Security Bulletin

- [Security](https://news.typo3.com/article/category/security-1)

TYPO3-SA-2010-016: TYPO3 Security Bulletin
==========================================

13 August 2010

![A laptop screen displaying a list of security advisories](https://news.typo3.com/typo3temp/assets/_processed_/d/c/csm_security_blog_default_77f8e86036.webp)

It has been discovered that the extension mm\_forum (mm\_forum) is vulnerable to Information Disclosure.

- ![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/bbf959d8e683550c90ae922aff9145d8.jpeg)[Marcus Krause](https://news.typo3.com/article/author/marcus-krause)

**Component Type:** Third party extension. This extension is not a part of the TYPO3 default installation.

**Affected Versions:** Version 1.9.0 and all versions below

**Vulnerability Type:** Information Disclosure

**Severity:** Low

**Suggested CVSS v2.0:** [AV:N/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C](http://jvnrss.ise.chuo-u.ac.jp/jtg/cvss/cvss2.cgi?vector=(AV:N/AC:L/Au:S/C:P/I:N/A:N/E:ND/RL:OF/RC:C)&g=2&lang=en) ([What's that?](http://buzz.typo3.org/teams/security/article/use-of-common-vulnerability-scoring-system-in-typo3-security-advisories/))

**Release Date:** 13.08.2010

**Problem Description:** The extension disloses PHP version number and IP addresses of (subscribed) website users. In detail, IP addresses of those users are exposed who send private messages to others or take part in forum discussions.

**Solution:** An updated version 1.9.1 is available from the TYPO3 extension manager and at [typo3.org/extensions/repository/view/mm\_forum/1.9.1/](http://typo3.org/extensions/repository/view/mm_forum/1.9.1/). Users of the extension are advised to update the extension as soon as possible.

**General advice:** Follow the recommendations that are given in the [TYPO3 Security Cookbook](http://typo3.org/fileadmin/security-team/typo3_security_cookbook_v-0.5.pdf). Please subscribe to the [typo3-announce mailing list](http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-announce) to receive future Security Bulletins via E-mail.

**Credits:** Credits go to Steffen Gebert, who discovered and reported the issue.

![](https://news.typo3.com/typo3temp/assets/t3g/blog/gravatar/b5c88386e5b1d8fca79d0652427922d2.jpeg)

About the Author

[Marcus Krause](https://news.typo3.com/article/author/marcus-krause)

[More posts by this author](https://news.typo3.com/article/author/marcus-krause)