High · 8.6 CVE-2025-48205 EUVD-2025-16033GHSA-cvgc-mx2w-h3w8

The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference

Published May 21, 2025 · Updated May 21, 2025 · Assigned by mitre

Description

The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.

Vendor	Product	Affected	Fixed
TYPO3	sr feuser register extension	5.1.0 – < 12.5.0	12.5.0

Ecosystem	Package	Affected	Fixed	Record
Packagist	sjbr/sr-feuser-register	>= 5.1.0, < 12.5.0	12.5.0	GHSA-cvgc-mx2w-h3w8