CVE-2020-25026

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-25026
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25026.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-25026
Aliases
Published
2020-09-02T17:15:12Z
Modified
2026-07-09T00:37:15Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

References

Affected packages

Git / github.com/derhansen/sf_event_mgt

Affected ranges

Type
GIT
Repo
https://github.com/derhansen/sf_event_mgt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
9c8315aee5707d7dd000420bff9204ae96ef2ce7
Introduced
a97a1c085f3ec66325da1a8bd90bb8e00c40ea33
Fixed
17edcbf608b252cc1123e1279f0735f6aa28fef4
Database specific
Show details 
{
    "cpe": "cpe:2.3:a:derhansen:event_management_and_registration:*:*:*:*:*:typo3:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "4.3.1"
        },
        {
            "introduced": "5.0.0"
        },
        {
            "fixed": "5.1.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

0.*
0.5.3
1.*
1.0.0
1.0.1
1.1.0
1.1.1
1.2.0
1.3.0
1.3.1
1.4.0
1.4.1
1.5.0
1.5.1
1.6.0
1.6.1
1.7.0
1.7.1
1.8.0
2.*
2.0.0
2.1.0
3.*
3.0.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
4.*
4.0.0
4.0.1
4.1.0
4.1.1
4.1.2
4.1.3
4.2.0
4.2.1
4.2.2
4.3.0
5.*
5.0.0
5.0.1
5.1.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25026.json"