CVE-2025-48202

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference...

CVE-2025-48202

creationtimestamp| type| source ---|---|--- 2025-05-21 17:18:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpp4aognhn2w 2025-05-21 20:41:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17199...

CVE-2025-48202

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference...

CVE-2025-48202

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference...

CVE-2025-48202

The CVE-2025-48202 entry applies to the TYPO3 femanager extension (versions up to 8.2.1). The vulnerability is an Insecure Direct Object Reference (IDOR) in the newAction of the newController, allowing attackers to view frontend user data via a user parameter. Root cause is unsafe direct object r...