Lucene search
GoogleOSV:GHSA-MM8V-WMQX-8H2JHistoryFeb 02, 2023 - 3:30 a.m.
Broken Access Control in 3rd party TYPO3 extension "femanager"
2023-02-0203:30:23
Google
osv.dev
8
access control
typo3
femanager
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
EPSS
0.001
Percentile
30.1%
A missing access check in the InvitationController allows an unauthenticated user with a valid invitation link to set the password of all frontend users.
Related
prion
prion
Design/Logic Flaw
2023-02-02 01:15:00
github
github
Broken Access Control in 3rd party TYPO3 extension "femanager"
2023-02-02 03:30:23
cve
cve
CVE-2023-25013
2023-02-02 01:15:08
cvelist
cvelist
CVE-2023-25013
2023-02-02 00:00:00
nvd
nvd
CVE-2023-25013
2023-02-02 01:15:08
osv
osv
CVE-2023-25013
2023-02-02 01:15:08
friendsofphp
friendsofphp
CVSS3
8.6
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
EPSS
0.001
Percentile
30.1%
Related for OSV:GHSA-MM8V-WMQX-8H2J