Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: derhansen Clear all filters
TI-2024-16268 CVE-2024-24751 · GHSA-4576-pgh2-g34j

Broken Access Control in Backend Module in sf_event_mgt

Priority LOW 39

sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00485 Published 2024-02-13 Fixed in 7.4.0 CWE-284
TI-2020-15292 CVE-2020-25026 · GHSA-g8rg-7rpr-cwr2

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x…

Priority LOW 21

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0077 Published 2020-09-02 Fixed in 4.3.1, 5.1.1 CWE-863