Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/in2code/femanager@6.4.2
Typecomposer
Namespacein2code
Namefemanager
Version6.4.2
Qualifiers
Subpath
Is_vulnerablefalse
Next_non_vulnerable_version7.5.3
Latest_non_vulnerable_version8.3.1
Affected_by_vulnerabilities
Fixing_vulnerabilities
0
url VCID-8q88-b5rv-tqhp
vulnerability_id VCID-8q88-b5rv-tqhp
summary 
Femanager extension for TYPO3 allows Insecure Direct Object Reference
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-7900
reference_id
reference_type
scores
0
value 0.00202
scoring_system epss
scoring_elements 0.42265
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-7900
1
reference_url https://github.com/in2code-de/femanager
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/in2code-de/femanager
2
reference_url https://github.com/in2code-de/femanager/commit/9bd9fbded4cf31f69bfe03c55d406e79050f8069
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/in2code-de/femanager/commit/9bd9fbded4cf31f69bfe03c55d406e79050f8069
3
reference_url https://typo3.org/security/advisory/typo3-ext-sa-2025-010
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-07-22T14:11:59Z/
url https://typo3.org/security/advisory/typo3-ext-sa-2025-010
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-7900
reference_id CVE-2025-7900
reference_type
scores
0
value 5.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-7900
5
reference_url https://github.com/advisories/GHSA-rc5f-3hfv-jxp2
reference_id GHSA-rc5f-3hfv-jxp2
reference_type
scores
url https://github.com/advisories/GHSA-rc5f-3hfv-jxp2
fixed_packages
0
url pkg:composer/in2code/femanager@6.4.2
purl pkg:composer/in2code/femanager@6.4.2
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/in2code/femanager@6.4.2
1
url pkg:composer/in2code/femanager@7.5.3
purl pkg:composer/in2code/femanager@7.5.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/in2code/femanager@7.5.3
2
url pkg:composer/in2code/femanager@8.3.1
purl pkg:composer/in2code/femanager@8.3.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/in2code/femanager@8.3.1
aliases CVE-2025-7900, GHSA-rc5f-3hfv-jxp2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8q88-b5rv-tqhp
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/in2code/femanager@6.4.2