Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/in2code/femanager@7.1.0
purl pkg:composer/in2code/femanager@7.1.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-ms2h-k8ts-zfhf Broken Access Control in 3rd party TYPO3 extension "femanager" An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users. CVE-2023-25014
GHSA-3p9x-xxx6-2w4p
VCID-xppr-vgfx-p3hy Broken Access Control in 3rd party TYPO3 extension "femanager" An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to set the password of all frontend users. CVE-2023-25013
GHSA-mm8v-wmqx-8h2j

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:43:56.024225+00:00 GitLab Importer Fixing VCID-ms2h-k8ts-zfhf https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/in2code/femanager/CVE-2023-25014.yml 38.6.0
2026-06-02T04:43:55.850170+00:00 GitLab Importer Fixing VCID-xppr-vgfx-p3hy https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/in2code/femanager/CVE-2023-25013.yml 38.6.0