GHSA-rc5f-3hfv-jxp2Medium

Femanager extension for TYPO3 allows Insecure Direct Object Reference

Published
July 22, 2025
Last Modified
July 22, 2025

🔗 CVE IDs covered (1)

CVE-2025-7900 →

📋 Description

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0.

🎯 Affected products3

  • composer/in2code/femanager:< 6.4.2
  • composer/in2code/femanager:>= 7.0.0, < 7.5.3
  • composer/in2code/femanager:>= 8.0.0, < 8.3.1

🔗 References (4)