PT-2020-15899 · Typo3 · Typo3 Sf Event Mgt Extension

Torben Hansen · Published 2020-09-02 · Updated 2021-07-21 · CVE-2020-25026

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions TYPO3 sf event mgt extension versions prior to 4.3.1 TYPO3 sf event mgt extension versions 5.x prior to 5.1.1

Description The issue allows Information Disclosure due to Broken Access Control, affecting participant data and event data via email. A missing access check in the backend module enables an authenticated backend user to export participant data for events they do not have access to. Another missing access check allows an authenticated backend user to send emails to event participants for events they do not have access to.

Recommendations For versions prior to 4.3.1, update to version 4.3.1 or later. For versions 5.x prior to 5.1.1, update to version 5.1.1 or later. As a temporary workaround, consider restricting access to the backend module to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-25026

GHSA-G8RG-7RPR-CWR2

Affected Products

Typo3 Sf Event Mgt Extension

References · 8

• https://typo3.org/help/security-advisories · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g8rg-7rpr-cwr2 · Vendor Advisory
• https://typo3.org/security/advisory/typo3-ext-sa-2020-017 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25026 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25026 · Security Note
• https://github.com/derhansen/sf_event_mgt/commit/17edcbf608b252cc1123e1279f0735f6aa28fef4 · Note
• https://github.com/derhansen/sf_event_mgt/security/advisories/GHSA-g8rg-7rpr-cwr2 · Note
• https://packagist.org/packages/derhansen/sf_event_mgt · Note