UpHeron
All vulnerabilities

Servers and applications

CVE-2025-7900

The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0

Severity
Medium 5.3
Published
22 Jul 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
TYPO3Servers and applications · cpe:a:typo3:typo3
  • Every version up to 6.4.1
  • From 7.0.0 up to 7.5.2
  • From 8.0.0 up to 8.3.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-7900
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-7900