Headline
GHSA-93j4-v838-8767: TYPO3 extension femanager Broken Access Control vulnerability
femanager fails to check access permissions for the invitation component. Depending on the configuration of the plugin, a remote user can create frontend user accounts with access to configured frontend groups.
TYPO3 extension femanager Broken Access Control vulnerability
Moderate severity GitHub Reviewed Published Oct 4, 2023 to the GitHub Advisory Database • Updated Oct 4, 2023