GHSA-4576-pgh2-g34j: derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module

Skip to content

• • Actions

    Automate any workflow

  • Packages

    Host and manage packages

  • Security

    Find and fix vulnerabilities

  • Codespaces

    Instant dev environments

  • Copilot

    Write better code with AI

  • Code review

    Manage code changes

  • Issues

    Plan and track work

  • Discussions

    Collaborate outside of code

• • GitHub Sponsors

    Fund open source developers

*   The ReadME Project
    
    GitHub community articles

• Pricing

Provide feedback

Saved searches****Use saved searches to filter your results more quickly

Sign up

1. GitHub Advisory Database
2. GitHub Reviewed
3. CVE-2024-24751

derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module

Moderate severity GitHub Reviewed Published Feb 13, 2024 in derhansen/sf_event_mgt • Updated Feb 13, 2024

Package

composer derhansen/sf_event_mgt (Composer)

Affected versions

>= 7.0.0, < 7.4.0

Description

The existing access control check for events in the backend module got broken during the update of the extension to TYPO3 12.4, because the RedirectResponse from the $this->redirect() function was never handled.

References

• GHSA-4576-pgh2-g34j
• derhansen/sf_event_mgt@a08c2cd

Published to the GitHub Advisory Database

Feb 13, 2024

Last updated

Feb 13, 2024