GHSA-377v-8637-6vq6

TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users

Source: GitHub Advisory Database (reviewed) Moderate CVE-2014-6292

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	in2code/femanager	< 1.0.9	1.0.9

Details

As written in the advisory (Markdown source, shown as plain text).

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2014-6292 advisory
https://github.com/in2code-de/femanager package
https://typo3.org/security/advisory/typo3-ext-sa-2014-002 web
http://typo3.org/extensions/repository/view/femanager web