TYPO3 Download Manager Extension Arbitrary File Upload

The vulnerability of the Download Manager reintdownloadmanager extension of the TYPO3 content management system is related to the use of a insecure direct link to an object IDOR when processing the downloaduid parameter in the downloadAction structure. Exploiting this vulnerability could allow an...

Authorization Bypass Through User-Controlled Key

Overview renolit/reint-downloadmanager is a simple download manager with different views of file collections as downloadable lists. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the downloaduid parameter in the downloadAction. An attacker...