Skip to content
OpenAdvisories
Medium · 5.3 CVE-2025-48202 EUVD-2025-16028GHSA-xxwr-wv9g-7jw3

The femanager TYPO3 extension allows Insecure Direct Object Reference

Published May 21, 2025 · Updated May 21, 2025 · Assigned by mitre

Vendor: TYPO3 Product: femanager extension Package: in2code/femanager Ecosystem: Packagist

Description

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.

Affected products

VendorProductAffectedFixed
TYPO3 femanager extension 5.5.0 – < 5.5.5, 6.0.0 – < 6.4.1, 7.0.0 – < 7.4.2, 8.0.0 – < 8.2.2 5.5.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist in2code/femanager >= 8.0.0, < 8.2.2 8.2.2 GHSA-xxwr-wv9g-7jw3
Packagist in2code/femanager >= 7.0.0, < 7.4.2 7.4.2 GHSA-xxwr-wv9g-7jw3
Packagist in2code/femanager >= 6.0.0, < 6.4.1 6.4.1 GHSA-xxwr-wv9g-7jw3
Packagist in2code/femanager >= 5.5.0, < 5.5.5 5.5.5 GHSA-xxwr-wv9g-7jw3

Advisories 1

References