Filtered by vendor Typo3
Subscriptions
Filtered by product Extension "club Directory"
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-77141 | 1 Typo3 | 1 Extension "club Directory" | 2026-08-28 | N/A |
| The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activate action and overwrite that record, or publish one still awaiting approval, without owning it. | ||||
Page 1 of 1.