CVE-2025-48205

HIGH8.6EPSS 0.29%

The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference

發布日:2025/5/21修改日:2025/5/21
也稱為:GHSA-cvgc-mx2w-h3w8

描述

The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. This allows attackers to read arbitrary files.

受影響套件(1)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH8.6CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

參考連結(4)