Approved changes feed: RSS · Atom

cpe:2.3:a:typo3:femanager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTypo3 (bebcd01c-0947-5641-89ed-9b814cca944e)
ProductFemanager (ca6804a0-71c7-5a69-9d83-fdaa77f958d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-50459 vulnerable 2026-09-16 04:40:58.085345 Details available
MEDIUM (5.4)
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users or delete various frontend user accounts.
Published: 2026-09-14T00:00:00.000Z
Updated: 2026-09-14T14:58:28.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50460 vulnerable 2026-09-16 04:40:58.020164 Details available
MEDIUM (5.4)
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system.
Published: 2026-09-14T00:00:00.000Z
Updated: 2026-09-14T18:12:49.998Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45023 vulnerable 2026-09-16 04:40:12.993449 Details available
MEDIUM (4.2)
The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.
Published: 2026-09-14T00:00:00.000Z
Updated: 2026-09-14T18:13:01.462Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.