CVE-2020-25026

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-25026
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-25026.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-25026
Aliases
Published
2020-09-02T17:15:12Z
Modified
2024-09-03T03:22:13.766481Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

The sfeventmgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

References

Affected packages

Git / github.com/derhansen/sf_event_mgt

Affected ranges

Type
GIT
Repo
https://github.com/derhansen/sf_event_mgt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
9c8315aee5707d7dd000420bff9204ae96ef2ce7

Affected versions

0.*

0.5.0
0.5.1
0.5.2
0.5.3

1.*

1.0.0
1.0.1
1.1.0
1.1.1
1.2.0
1.3.0
1.3.1
1.4.0
1.4.1
1.5.0
1.5.1
1.6.0
1.6.1
1.7.0
1.7.1
1.8.0
1.8.1

2.*

2.0.0
2.1.0

3.*

3.0.0
3.0.1
3.0.2
3.0.3
3.0.4
3.0.5
3.0.6
3.0.7
3.0.8

4.*

4.0.0
4.0.1
4.1.0
4.1.1
4.1.2
4.1.3
4.2.0
4.2.1
4.2.2
4.3.0