GHSA-377v-8637-6vq6

ghsaUSosv

TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users

view advisory published 2022-05-13Licence: CC-BY-4.0

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2014-6292US	medium6.4OT elevated	1.33% (71st)	—	2014-10-03
The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.

references

External citations — patches, advisories, analysis.

http://typo3.org/extensions/repository/view/femanagerWEB
https://github.com/in2code-de/femanagerPACKAGE
https://nvd.nist.gov/vuln/detail/CVE-2014-6292ADVISORY
https://typo3.org/security/advisory/typo3-ext-sa-2014-002WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan