Description (CNA)
The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activate action and overwrite that record, or publish one still awaiting approval, without owning it.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TYPO3 / Extension "Club Directory" | affected 8.0.0 before 8.1.3; affected 7.0.0 before 7.0.2; affected 0 before 6.0.2 |
CWE
CWE-862, CWE-639
References
ADP enrichment
No English description supplied.
No references supplied.