HIGH8.6
GHSA-cvgc-mx2w-h3w8
The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference
Quick fix
GHSA-cvgc-mx2w-h3w8 — sjbr/sr-feuser-register: upgrade to the fixed version with the command below.
composer require sjbr/sr-feuser-register:^12.5.0Details
The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. This allows attackers to read arbitrary files.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/sjbr/sr-feuser-register
Introduced in:
5.1.0Fixed in: 12.5.0Fix
composer require sjbr/sr-feuser-register:^12.5.0