https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T04:36:31.767524+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-26153 cnvd-2021-26153 2026-10-17T04:36:31.840356+00:00 cnvd-2021-26153 https://cve.radiocsirt.org/vuln/euvd-2026-45344 EUVD-2026-45344 2026-10-17T04:36:31.840396+00:00 EUVD-2026-45344 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25026 fkie_cve-2020-25026 2026-10-17T04:36:31.840410+00:00

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

 https://cve.radiocsirt.org/vuln/ghsa-g8rg-7rpr-cwr2 GHSA-g8rg-7rpr-cwr2 — Information Disclosure in TYPO3 extension sf_event_mgt 2026-10-17T04:36:31.840439+00:00

Affected: Packagist: derhansen/sf_event_mgt

A missing access check in the backend module allows an authenticated backend user to export participant data for events which the user does not have access to, resulting in Information Disclosure.

Another missing access check in the backend module allows an authenticated backend user to send emails to event participants for events which the user does not have access to, resulting in Broken Access Control.

External reference: [https://typo3.org/security/advisory/typo3-ext-sa-2020-017](https://typo3.org/security/advisory/typo3-ext-sa-2020-017)

 https://cve.radiocsirt.org/vuln/gsd-2020-25026 gsd-2020-25026 2026-10-17T04:36:31.840470+00:00 gsd-2020-25026