Extension "Club Directory" vulnerabilities
1 known vulnerability in Extension "Club Directory" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
Extension "Club Directory": Authorization Bypass Through User-Controlled Key
The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a d