TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users

Description

References

• nvd.nist.gov/vuln/detail/CVE-2014-6292 · ADVISORY
• in2code-de/femanager · PACKAGE
• typo3.org/security/advisory/typo3-ext-sa-2014-002 · WEB
• typo3.org/extensions/repository/view/femanager · WEB
• typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002 · Patch

Autres vulnérabilités de in2code/femanager

• CVE-2023-50459MOYENNE 5.4An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user compon…
• CVE-2023-45023MOYENNE 4.2The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component…
• CVE-2025-7900MOYENNE 6.5The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue aff…
• CVE-2025-48202MOYENNE 5.3The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.
• CVE-2022-44543MOYENNE 5.3The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted group…