Lucene search

PRIOn knowledge basePRION:CVE-2022-44543

HistoryDec 12, 2023 - 5:15 p.m.

Design/Logic Flaw

2023-12-1217:15:00

PRIOn knowledge base

www.prio-n.com

femananger extension

creation of frontend users

restricted groups

usergroup.inlist

typo3

7.1 High

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.1%

JSON

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.

CPENameOperatorVersion
femanagereq7.0.0
femanagerge6.0.0
femanagerlt6.3.3
femanagerlt5.5.2

Name	Operator	Version
femanager	eq	7.0.0
femanager	ge	6.0.0
femanager	lt	6.3.3
femanager	lt	5.5.2

References

typo3.org/help/security-advisories

typo3.org/security/advisory/typo3-ext-sa-2022-015