CVE-2025-48202 MEDIUM

CVE-2025-48202

Vendor Typo3
Product femanager extension
Weakness CWE-425 · Forced browsing
Published May 21, 2025
Last update May 21, 2025
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The femanager extension through 8.2.1 for TYPO3 allows Insecure Direct Object Reference.

Key dates

02Disclosure timeline

May 21, 2025 CVE published
May 21, 2025 Record updated