GHSA-rc5f-3hfv-jxp2

ghsaUSosv

Femanager extension for TYPO3 allows Insecure Direct Object Reference

view advisory published 2025-07-22Licence: CC-BY-4.0

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-7900US	medium6.5	0.25% (17th)	—	2025-07-22
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below,…

references

External citations — patches, advisories, analysis.

https://github.com/in2code-de/femanagerPACKAGE
https://github.com/in2code-de/femanager/commit/9bd9fbded4cf31f69bfe03c55d406e79050f8069WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-7900ADVISORY
https://typo3.org/security/advisory/typo3-ext-sa-2025-010WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan