Skip to content
OpenAdvisories
Medium · 4.2 CVE-2023-45023 EUVD-2023-60667GHSA-93j4-v838-8767

TYPO3 extension femanager Broken Access Control vulnerability

Published Sep 14, 2026 · Updated Sep 14, 2026 · Assigned by mitre

Vendor: TYPO3 Product: femanager Package: in2code/femanager Ecosystem: Packagist

Description

The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation component.

Affected products

VendorProductAffectedFixed
TYPO3 femanager 7.0.0 – < 7.2.2 7.2.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist in2code/femanager >= 7.0.0, < 7.2.2 7.2.2 GHSA-93j4-v838-8767

Advisories 1

References