CVE-2022-44543

2023-12-1200:00:00

mitre

www.cve.org

typo3

femanager extension

usergroup.inlist

restricted groups

0.0005 Low

EPSS

Percentile

17.1%

JSON

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.