CVE-2025-48202

Summary

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.

Affected Software

VendorProductVersion RangeStatus
TYPO3femanager extension5.5.0 < 5.5.5affected
TYPO3femanager extension6.0.0 < 6.4.1affected
TYPO3femanager extension7.0.0 < 7.4.2affected
TYPO3femanager extension8.0.0 < 8.2.2affected

Weaknesses

  • CWE-425: CWE-425 Direct Request ('Forced Browsing')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References