Frontend User Registration extension for TYPO3 does not properly verify access rights
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2009-1264US | medium4.0 | — | ||
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sen… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21WEB
- https://github.com/TYPO3-extensions/sr_feuser_registerPACKAGE
- https://nvd.nist.gov/vuln/detail/CVE-2009-1264ADVISORY
- https://web.archive.org/web/20090527190538/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004WEB
- https://web.archive.org/web/20200228205603/http://www.securityfocus.com/bid/34374WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan