https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 19:05:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-01790 bdu:2023-01790 https://cve.radiocsirt.org/vuln/bdu:2023-01790 https://cve.radiocsirt.org/vuln/euvd-2026-225360 EUVD-2026-225360 https://cve.radiocsirt.org/vuln/euvd-2026-225360 https://cve.radiocsirt.org/vuln/fkie_cve-2023-25013 <p>An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.</p> <p>An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-25013 https://cve.radiocsirt.org/vuln/ghsa-mm8v-wmqx-8h2j <p><strong>Affected:</strong> Packagist: in2code/femanager</p> <p>A missing access check in the `InvitationController` allows an unauthenticated user with a valid invitation link to set the password of all frontend users.</p> <p><strong>Affected:</strong> Packagist: in2code/femanager</p> <p>A missing access check in the `InvitationController` allows an unauthenticated user with a valid invitation link to set the password of all frontend users.</p> https://cve.radiocsirt.org/vuln/ghsa-mm8v-wmqx-8h2j https://cve.radiocsirt.org/vuln/gsd-2023-25013 gsd-2023-25013 https://cve.radiocsirt.org/vuln/gsd-2023-25013