The femanager TYPO3 extension allows Insecure Direct Object Reference

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-48202 · ADVISORY
• in2code-de/femanager commit 54851f8 · WEB
• FriendsOfPHP/security-advisories · WEB
• in2code-de/femanager · PACKAGE
• typo3.org/security/advisory/typo3-ext-sa-2025-006 · WEB

in2code/femanager のその他の脆弱性

• CVE-2023-50459中 5.4An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user compon…
• CVE-2023-45023中 4.2The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component…
• CVE-2025-7900中 6.5The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue aff…
• CVE-2022-44543中 5.3The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted group…
• CVE-2023-25014高 7.5An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in …