7 matches found
CVE-2023-45023
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component...
CVE-2023-45023: Incorrect Authorization
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component...
EUVD-2023-60667
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component...
CVE-2023-45023
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component...
CVE-2023-45023
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component...
GHSA-93J4-V838-8767 TYPO3 extension femanager Broken Access Control vulnerability
femanager fails to check access permissions for the invitation component. Depending on the configuration of the plugin, a remote user can create frontend user accounts with access to configured frontend groups...
PT-2023-29362
Name of the Vulnerable Software and Affected Versions femanager affected versions not specified Description The issue concerns a lack of proper access permission checks for the invitation component in femanager. This can allow a remote user to create frontend user accounts with access to configur...