Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 02:36:57 +0000 cnvd-2021-26153 https://cve.radiocsirt.org/vuln/cnvd-2021-26153 cnvd-2021-26153 https://cve.radiocsirt.org/vuln/cnvd-2021-26153 EUVD-2026-45344 https://cve.radiocsirt.org/vuln/euvd-2026-45344 EUVD-2026-45344 https://cve.radiocsirt.org/vuln/euvd-2026-45344 fkie_cve-2020-25026 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25026 <p>The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.</p> <p>The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25026 GHSA-g8rg-7rpr-cwr2 — Information Disclosure in TYPO3 extension sf_event_mgt https://cve.radiocsirt.org/vuln/ghsa-g8rg-7rpr-cwr2 <p><strong>Affected:</strong> Packagist: derhansen/sf_event_mgt</p> <p>A missing access check in the backend module allows an authenticated backend user to export participant data for events which the user does not have access to, resulting in Information Disclosure.</p> <p>Another missing access check in the backend module allows an authenticated backend user to send emails to event participants for events which the user does not have access to, resulting in Broken Access Control.</p> <p>External reference: [https://typo3.org/security/advisory/typo3-ext-sa-2020-017](https://typo3.org/security/advisory/typo3-ext-sa-2020-017)</p> <p><strong>Affected:</strong> Packagist: derhansen/sf_event_mgt</p> <p>A missing access check in the backend module allows an authenticated backend user to export participant data for events which the user does not have access to, resulting in Information Disclosure.</p> <p>Another missing access check in the backend module allows an authenticated backend user to send emails to event participants for events which the user does not have access to, resulting in Broken Access Control.</p> <p>External reference: [https://typo3.org/security/advisory/typo3-ext-sa-2020-017](https://typo3.org/security/advisory/typo3-ext-sa-2020-017)</p> https://cve.radiocsirt.org/vuln/ghsa-g8rg-7rpr-cwr2 gsd-2020-25026 https://cve.radiocsirt.org/vuln/gsd-2020-25026 gsd-2020-25026 https://cve.radiocsirt.org/vuln/gsd-2020-25026