HIGH
GHSA-rjrq-93hp-22ww
Frontend User Registration extension for TYPO3 does not properly verify access rights
Quick fix
GHSA-rjrq-93hp-22ww — sjbr/sr-feuser-register: upgrade to the fixed version with the command below.
composer require sjbr/sr-feuser-register:^2.5.21Details
Frontend User Registration (sr_feuser_register) extension 2.5.20 and earlier for TYPO3 does not properly verify access rights, which allows remote authenticated users to obtain sensitive information such as passwords via unknown attack vectors.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/sjbr/sr-feuser-register
Introduced in:
0Fixed in: 2.5.21Fix
composer require sjbr/sr-feuser-register:^2.5.21References
- https://nvd.nist.gov/vuln/detail/CVE-2009-1264[ADVISORY]
- https://github.com/TYPO3-extensions/sr_feuser_register[PACKAGE]
- https://web.archive.org/web/20090527190538/http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-004[WEB]
- https://web.archive.org/web/20200228205603/http://www.securityfocus.com/bid/34374[WEB]
- http://typo3.org/extensions/repository/view/sr_feuser_register/2.5.21[WEB]