CVE-2023-50460mediumCWE-863

CVE-2023-50460: medium-severity vulnerability in TYPO3 femanager

Published

Follow this CVE+ Monitor femanager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.3%
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Affected products
TYPO3 · femanager
Related CVEs — TYPO3 femanager

In the same product, most dangerous first.

CVE-2023-50459MEDIUMCVE-2023-50459EPSS 0.3%CVE-2023-45023MEDIUMCVE-2023-45023EPSS 0.2%