CVE-2023-25014

CVE-2023-25014 affects the TYPO3 femanager extension (pre-5.5.3, pre-6.3.4 in 6.x, and pre-7.1.0 in 7.x). The root cause is missing access checks in the InvitationController, enabling an unauthenticated user to delete all frontend users. Reported across multiple feeds (NVD, Red Hat, GHSA/OSV, etc...

CVE-2023-25013

The CVE-2023-25013 issue affects the TYPO3 femanager extension (versions: <5.5.3, <6.3.4 for 6.x, and