Vulnerabilidades do TYPO3 Extension "Frontend User Registration"
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam TYPO3 Extension "Frontend User Registration": 1 registro(s), com versões afetadas e correções.
CVE-2026-46721
Média · 6.9
CWE-639 19/05/2026
Broken Access Control in extension "Frontend User Registration" (sf_register)
The create and edit flows do not restrict which user properties may be submitted and do not enforce access control on the frontend user group assignment. As a result, an attacker can assign an arbitrary frontend user group to a newly registered or edited account, gaining unauthorized access to content and functionality restricted to privileged frontend user groups.