CVE-2023-50459mediumCWE-863

CVE-2023-50459: medium-severity vulnerability in TYPO3 femanager

Published

Follow this CVE+ Monitor femanager+ Monitor in2code/femanager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.3%
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users or delete various frontend user accounts.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected products
TYPO3 · femanager
Related CVEs — TYPO3 femanager

In the same product, most dangerous first.

CVE-2023-50460MEDIUMCVE-2023-50460EPSS 0.3%CVE-2023-45023MEDIUMCVE-2023-45023EPSS 0.2%