Femanager vulnerabilities

2 known vulnerabilities in Femanager from In2code. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Femanager: Missing Authentication for Critical Functionality

  CVE-2023-25014Feb 2, 2023In2code

  An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.

• 7.5 High severity

  Femanager: Missing Authentication for Critical Functionality

  CVE-2023-25013Feb 2, 2023In2code

  An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.