GHSA-4576-pgh2-g34jMediumCVSS 4.3

derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module

Published
February 13, 2024
Last Modified
October 18, 2024

🔗 CVE IDs covered (1)

CVE-2024-24751 →

📋 Description

The existing access control check for events in the backend module got broken during the update of the extension to TYPO3 12.4, because the RedirectResponse from the $this->redirect() function was never handled.

🎯 Affected products1

  • composer/derhansen/sf_event_mgt:>= 7.0.0, < 7.4.0

🔗 References (4)