GHSA-4576-pgh2-g34j
derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | derhansen/sf_event_mgt | >= 7.0.0, < 7.4.0 | 7.4.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
The existing access control check for events in the backend module got broken during the update of the extension to TYPO3 12.4, because the `RedirectResponse` from the `$this->redirect()` function was never handled.
References
External links from the advisory. They lead to third-party sites.