An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-02-02T00:00:00

Updated: 2024-08-02T11:11:43.489Z

Reserved: 2023-02-01T00:00:00

Link: CVE-2023-25014

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2023-02-02T01:15:08.670

Modified: 2024-11-21T07:48:56.013

Link: CVE-2023-25014

cve-icon Redhat

No data.