| Package | Affected versions | Patched versions |
|---|---|---|
| in2code/femanager | ≥ 7.0.0, < 7.5.3≥ 8.0.0, < 8.3.1< 6.4.2 | 7.5.38.3.16.4.2 |
| typo3 | ≥ 7.0.0, ≤ 7.5.2≥ 8.0.0, ≤ 8.3.0≤ 6.4.1 |
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free