Read the docs

derhansen

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

derhansen records in CISA KEV

No derhansen vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Event Management And Registration 2 records LOW

Records

2 records

TI-2024-16268 CVE-2024-24751 · GHSA-4576-pgh2-g34j

Broken Access Control in Backend Module in sf_event_mgt

Priority LOW 39

sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00485 Published 2024-02-13 Fixed in 7.4.0 CWE-284
TI-2020-15292 CVE-2020-25026 · GHSA-g8rg-7rpr-cwr2

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x…

Priority LOW 21

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0077 Published 2020-09-02 Fixed in 4.3.1, 5.1.1 CWE-863
Open these records in search →