CVE-2014-8874

CVE-2014-8874 describes an information disclosure vulnerability in the ke_questionnaire extension 2.5.2 and earlier for TYPO3, where predictable naming of questionnaire answer forms allows remote attackers to obtain sensitive data via direct requests. With a CVSS score of 5.0 (AV:N/AC:L/Au:N/C:P/I:N/A:N), this vulnerability is of medium severity, indicating it can be exploited remotely with low complexity to achieve partial confidentiality impact without authentication. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage, suggesting low current threat activity.