What’s Vulnerable › Vulnerabilities

CVE-2022-44543

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-12-12 · updated 2026-06-17

Description

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.

Affected products

• In2Code Femanager: before 5.5.2; from 6.0.0 before 6.3.3; 7.0.0 — fixed in 5.5.2, 6.3.3

How to fix

Upgrade to a fixed version: In2Code Femanager 5.5.2, 6.3.3. Check the vendor advisory for mitigations.

References

• https://typo3.org/help/security-advisories
• https://typo3.org/security/advisory/typo3-ext-sa-2022-015
• https://typo3.org/help/security-advisories
• https://typo3.org/security/advisory/typo3-ext-sa-2022-015

Get alerted when CVE-2022-44543 or the next vulnerability affects your stack