Medium CVE-2014-6292 EUVD-2014-6177GHSA-377v-8637-6vq6

TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users

Published Oct 3, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Package: in2code/femanager Ecosystem: Packagist

Description

The femanager extension before 1.0.9 for TYPO3 allows remote frontend users to modify or delete the records of other frontend users via unspecified vectors.

Affected packages

Ecosystem	Package	Affected	Fixed	Record
Packagist	in2code/femanager	< 1.0.9	1.0.9	GHSA-377v-8637-6vq6

References

http://typo3.org/extensions/repository/view/femanager
http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2014-002/