PT-2022-27229 · Typo3 · Femanager

André Buchmann · Published 2022-11-03 · Updated 2023-12-14 · CVE-2022-44543

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions femanager extension versions prior to 5.5.2 femanager extension versions 6.x prior to 6.3.3 femanager extension versions 7.x prior to 7.0.1

Description The issue allows creation of frontend users in restricted groups if there is a usergroup field on the registration form. This occurs because the usergroup.inList protection mechanism is mishandled, allowing the validation to be bypassed. New frontend users created by the extension may be members of groups that are restricted. The vulnerability is only exploitable if the field usergroup is available in the registration form.

Recommendations For femanager extension versions prior to 5.5.2, update to version 5.5.2 or later. For femanager extension versions 6.x prior to 6.3.3, update to version 6.3.3 or later. For femanager extension versions 7.x prior to 7.0.1, update to version 7.0.1 or later. As a temporary workaround, consider removing the usergroup field from the registration form until a patch is applied.

Exploit

Fix

Related Identifiers

CVE-2022-44543

GHSA-59M9-P6CM-94Q5

Affected Products

Femanager

References · 12

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/femanager/CVE-2022-44543.yaml · Exploit
• https://typo3.org/security/advisory/typo3-ext-sa-2022-015 · Vendor Advisory
• https://typo3.org/help/security-advisories · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44543 · Security Note
• https://osv.dev/vulnerability/GHSA-59m9-p6cm-94q5 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-44543 · Vendor Advisory
• https://github.com/in2code-de/femanager · Note
• https://github.com/in2code-de/femanager/releases/tag/7.0.1 · Note
• https://github.com/in2code-de/femanager/releases/tag/5.5.2 · Note
• https://github.com/in2code-de/femanager/commit/827edbc767b1cb6c0cb77d82e46b88fea3b22ad9 · Note
• https://github.com/in2code-de/femanager/releases/tag/6.3.3 · Note
• https://twitter.com/CVEnew/status/1734617270968885248 · Twitter Post