CVE-2025-7900 — Insecure Direct Object Reference in extension "femanager" (femanager)

CVE-2025-7900

Insecure Direct Object Reference in extension "femanager" (femanager) PUBLISHED

Description (CNA)

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0

Affected (CNA)

Vendor / product	Versions
TYPO3 / Extension "femanager"	affected 8.0.0 through 8.3.0; affected 7.0.0 through 7.5.2; affected 0 through 6.4.1

CWE

CWE-639

References

https://typo3.org/security/advisory/typo3-ext-sa-2025-010

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.