Frontend User Registration extension for TYPO3 does not properly verify access rights

MEDIUM 4.0CVE-2009-1264 · GHSA-rjrq-93hp-22ww · Published 07/04/2009 · updated 16/06/2026

In short

CVE-2009-1264 is a MEDIUM (CVSS 4.0) vulnerability affecting sjbr/sr-feuser-register, sr feuser register (stanislas rolland).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.0% of all vulnerabilities.
Fix: update to 2.5.21 or later.

Package	Affected versions	Patched versions
sjbr/sr-feuser-register Packagist	`< 2.5.21`	`2.5.21`
sr feuser register stanislas_rolland	`= 1.4= 1.6= 2.2.1= 2.2.7= 2.2.8= 2.3= 2.3.6= 2.4= 2.5= 2.5.10≤ 2.5.20`	No fix yet

Description

Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2009-1264 · ADVISORY
TYPO3-extensions/sr_feuser_register · PACKAGE
web.archive.org/web/20090527190538/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004 · WEB
web.archive.org/web/20200228205603/http://www.securityfocus.com/bid/34374 · WEB
typo3.org/extensions/repository/view/sr_feuser_register/2.5.21 · WEB
osvdb.org/53278
secunia.com/advisories/34586 · Vendor Advisory
typo3.org/extensions/repository/view/sr_feuser_register/2.5.21 · Patch
typo3.org/teams/security/security-bulletins/typo3-sa-2009-004 · Patch
securityfocus.com/bid/34374 · Patch
vupen.com/english/advisories/2009/0938 · Patch

More vulnerabilities in sjbr/sr-feuser-register

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free