p PatchFirst

CVE-2022-44543

CVE-2022-44543

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.

CVSS 6.5 · Medium · EPSS 0.6% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • in2code/femanager Packagist

    Versions
    • 7.0.0
    Affected ranges
    • ECOSYSTEM: ≥ 7.0.0, < 7.0.1

    Update to 7.0.1

  • in2code/femanager Packagist

    Versions
    • 6.0.0
    • 6.0.1
    • 6.1.0
    • 6.1.1
    • 6.1.2
    • 6.2.0
    • 6.2.1
    • 6.3.0
    • 6.3.1
    • 6.3.2
    Affected ranges
    • ECOSYSTEM: ≥ 6.0.0, < 6.3.3

    Update to 6.3.3

  • in2code/femanager Packagist

    Versions
    • 2.5.0
    • 2.5.1
    • 2.6.0
    • 2.6.1
    • 2.6.2
    • 2.7.0
    • 3.0.0
    • 3.0.1
    • 3.0.2
    • 3.1.0
    • 3.1.1
    • 3.1.2
    • 3.1.3
    • 3.2.0
    • 3.3.0
    • 4.0.0
    • 4.0.1
    • 4.0.2
    • 4.1.0
    • 4.1.1
    • 4.2.0
    • 4.2.1
    • 4.2.2
    • 4.2.3
    • 4.2.4
    • 4.2.5
    • 5.0.0
    • 5.1.0
    • 5.1.1
    • 5.2.0
    • 5.3.0
    • 5.3.1
    • 5.4.0
    • 5.4.1
    • 5.4.2
    • 5.5.0
    • 5.5.1
    Affected ranges
    • ECOSYSTEM: < 5.5.2

    Update to 5.5.2

Original sources

Check your server →