Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-7900
6.5
MEDIUMCVSS v3
Published
July 22, 2025
Affected
1 project
Assigned by
f4fb688c-4412-4426-b4b8-421ecf27b14a
Severity scale
010
Description
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0
TYPO3/typo3
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS
GitHubThe TYPO3 Core - Enterprise Content Management System. Synchronized mirror of https://review.typo3.org/q/project:Packages/TYPO3.CMS<= 6.4.1, >= 7.0.0, <= 7.5.2, >= 8.0.0, <= 8.3.0NVD