CVE-2025-7900
CVE-2025-7900 · Insecure Direct Object Reference in extension "femanager" (femanager)
This page contains facts from public vulnerability sources. Check the original advisory before updating.
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0
CVSS 5.3 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
extension "femanager"
- Versions
- ≥ 8.0.0, ≤ 8.3.0: Affected (semver)
- ≥ 7.0.0, ≤ 7.5.2: Affected (semver)
- ≥ 0, ≤ 6.4.1: Affected (semver)
No fix published
in2code/femanager Packagist
- Versions
- 2.5.0
- 2.5.1
- 2.6.0
- 2.6.1
- 2.6.2
- 2.7.0
- 3.0.0
- 3.0.1
- 3.0.2
- 3.1.0
- 3.1.1
- 3.1.2
- 3.1.3
- 3.2.0
- 3.3.0
- 4.0.0
- 4.0.1
- 4.0.2
- 4.1.0
- 4.1.1
- 4.2.0
- 4.2.1
- 4.2.2
- 4.2.3
- 4.2.4
- 4.2.5
- 5.0.0
- 5.1.0
- 5.1.1
- 5.2.0
- 5.3.0
- 5.3.1
- 5.4.0
- 5.4.1
- 5.4.2
- 5.5.0
- 5.5.1
- 5.5.2
- 5.5.3
- 5.5.4
- 5.5.5
- 6.0.0
- 6.0.1
- 6.1.0
- 6.1.1
- 6.1.2
- 6.2.0
- 6.2.1
- 6.3.0
- 6.3.1
- 6.3.2
- 6.3.3
- 6.3.4
- 6.3.5
- 6.3.6
- 6.4.0
- 6.4.1
- Affected ranges
- ECOSYSTEM: < 6.4.2
Update to 6.4.2
in2code/femanager Packagist
- Versions
- 7.0.0
- 7.0.1
- 7.1.0
- 7.1.1
- 7.2.0
- 7.2.1
- 7.2.2
- 7.2.3
- 7.3.0
- 7.4.0
- 7.4.1
- 7.4.2
- 7.5.0
- 7.5.1
- 7.5.2
- Affected ranges
- ECOSYSTEM: ≥ 7.0.0, < 7.5.3
Update to 7.5.3
in2code/femanager Packagist
- Versions
- 8.0.0
- 8.0.1
- 8.1.0
- 8.2.0
- 8.2.1
- 8.2.2
- 8.3.0
- Affected ranges
- ECOSYSTEM: ≥ 8.0.0, < 8.3.1
Update to 8.3.1