CVE-2025-7900

Insecure Direct Object Reference in extension "femanager" (femanager)

CVSS 5.3 MEDIUMEPSS 0.2%CWE-639

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Produtos afetados

TYPO3 · Extension "femanager"

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://typo3.org/security/advisory/typo3-ext-sa-2025-010