CVE Intelligence

Vulnerabilidades do TYPO3 Extension "Frontend User Registration"

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam TYPO3 Extension "Frontend User Registration": 1 registro(s), com versões afetadas e correções.

CVE-2026-46721 Média · 6.9 CWE-639 19/05/2026
Broken Access Control in extension "Frontend User Registration" (sf_register)
The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment. As a result, an attacker can assign an arbitrary frontend user group to a newly registered or edited account, gaining unauthorized access to content and functionality restricted to privileged frontend user groups.