Extension "Telephone Directory" vulnerabilities

1 known vulnerability in Extension "Telephone Directory" from TYPO3. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Extension "Telephone Directory": Authorization Bypass Through User-Controlled Key

  CVE-2026-77140Aug 25, 2026TYPO3

  The extension validates the HMAC of a frontend employee edit link only in the action that renders the edit form, not in the action that persists the change. An unauthenticated visitor who knows the UID of a visible employee record can send a direct POST reques