What’s Vulnerable › Vulnerabilities
CVE-2023-50459
- Severity: medium (CVSS 5.4 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.3% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-09-14 · updated 2026-09-22
- Weakness: CWE-863
Description
An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. It fails to check access permissions for the edit user component. An authenticated frontend user can exploit this to either edit data of various frontend users or delete various frontend user accounts.
Affected products
- TYPO3 femanager: from 7.0.0 before 7.2.3 — fixed in 7.2.3
How to fix
Upgrade to a fixed version: TYPO3 femanager 7.2.3. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2023-50459 or the next vulnerability affects your stack