CVE-2023-50460

TYPO3 / femanager PUBLISHED

Description (CNA)

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system.

Affected (CNA)

Vendor / product	Versions
TYPO3 / femanager	affected 7.0.0 before 7.2.3

CWE

CWE-863

References

https://typo3.org/security/advisory/typo3-ext-sa-2023-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.