Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: TYPO3 Extension "Events 2" — typo3.org/security/advisory/typo3-ext-sa-2026-026 Clear all filters
TI-2026-53887 CVE-2026-77144 · GHSA-fc27-9m9g-625p

Broken Access Control in extension "Events 2" (events2)

Priority LOW 31

The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00413 Published 2026-08-25 Fixed in 10.2.12, 9.4.2 +1 CWE-915
TI-2026-53888 CVE-2026-77145 · GHSA-4f49-557j-w78c

Broken Access Control in extension "Events 2" (events2)

Priority LOW 31

The permission check for the frontend management update flow verified a different event than the one the request went on to modify.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00351 Published 2026-08-25 Fixed in 10.2.12, 9.4.2 +1 CWE-639