CVE-2025-48202
CVE-2025-48202
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
femanager extension
- Versions
- ≥ 5.5.0, < 5.5.5: Affected (semver)
- ≥ 6.0.0, < 6.4.1: Affected (semver)
- ≥ 7.0.0, < 7.4.2: Affected (semver)
- ≥ 8.0.0, < 8.2.2: Affected (semver)
Update to 5.5.5; Update to 6.4.1; Update to 7.4.2; Update to 8.2.2
in2code/femanager Packagist
- Versions
- 8.0.0
- 8.0.1
- 8.1.0
- 8.2.0
- 8.2.1
- Affected ranges
- ECOSYSTEM: ≥ 8.0.0, < 8.2.2
Update to 8.2.2
in2code/femanager Packagist
- Versions
- 7.0.0
- 7.0.1
- 7.1.0
- 7.1.1
- 7.2.0
- 7.2.1
- 7.2.2
- 7.2.3
- 7.3.0
- 7.4.0
- 7.4.1
- Affected ranges
- ECOSYSTEM: ≥ 7.0.0, < 7.4.2
Update to 7.4.2
in2code/femanager Packagist
- Versions
- 6.0.0
- 6.0.1
- 6.1.0
- 6.1.1
- 6.1.2
- 6.2.0
- 6.2.1
- 6.3.0
- 6.3.1
- 6.3.2
- 6.3.3
- 6.3.4
- 6.3.5
- 6.3.6
- 6.4.0
- Affected ranges
- ECOSYSTEM: ≥ 6.0.0, < 6.4.1
Update to 6.4.1
in2code/femanager Packagist
- Versions
- 5.5.0
- 5.5.1
- 5.5.2
- 5.5.3
- 5.5.4
- Affected ranges
- ECOSYSTEM: ≥ 5.5.0, < 5.5.5
Update to 5.5.5