CVE-2024-24751

The vulnerability CVE-2024-24751 affects the sf_event_mgt TYPO3 extension (backend module). The root cause is mishandling of the RedirectResponse from the $this->redirect() function after upgrading to TYPO3 12.4, which breaks an existing access control check for events in the backend. This lea...

CVE-2020-25026

The CVE-2020-25026 entry applies to the TYPO3 extension sf_event_mgt (Event management and registration). It describes a Broken Access Control vulnerability that allows information disclosure of participant and event data via email for the versions before 4.3.1 (and 5.x before 5.1.1). The documen...