CVE-2025-48205
The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference.
- Update to 12.5.0
Published Updated
PatchFirst · Latest vulnerabilities
sjbr/sr-feuser-register vulnerabilities
Vulnerabilities published for sjbr/sr-feuser-register in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 4
CVE-2025-48200
The sr_feuser_register extension through 12.4.8 for TYPO3 allows Remote Code Execution.
- Update to 12.5.0
Published UpdatedCVE-2012-5890
The Front End User Registration (sr_feuser_register) extension before 2.6.2 for TYPO3 allows remote attackers to obtain user names and passwords via the (1) edit perspective or (2) autologin feature.
- Update to 2.6.2
Published UpdatedCVE-2009-1264
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
- Update to 2.5.21
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.