The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 has incorrect Access Control for confirming various applications.

Published Aug 13, 2021 · Updated Aug 4, 2024 · Assigned by mitre