An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2023-02-02T00:00:00
Updated: 2024-08-02T11:11:43.394Z
Reserved: 2023-02-01T00:00:00
Link: CVE-2023-25013
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-02-02T01:15:08.600
Modified: 2024-11-21T07:48:55.870
Link: CVE-2023-25013
Redhat
No data.