In2code vulnerabilities
We track 4 vulnerabilities in In2code products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2024.
Latest In2code vulnerabilities
- 7.5 High severity
Powermail: Authorization Bypass Through User-Controlled Key
An issue was discovered in the powermail extension through 12.4.0 for TYPO3. It fails to validate the mail parameter of the createAction, resulting in Insecure Direct Object Reference (IDOR) in some configurations. An unauthenticated attacker can use this to d
- 9.8 Critical severity
typo3: Improper Access Control
An issue was discovered in powermail extension through 12.3.5 for TYPO3. Several actions in the OutputController can directly be called, due to missing or insufficiently implemented access checks, resulting in Broken Access Control. Depending on the configurat
- 7.5 High severity
Femanager: Missing Authentication for Critical Functionality
An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.
- 7.5 High severity
Femanager: Missing Authentication for Critical Functionality
An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.