{"id":"CVE-2023-50460","state":"PUBLISHED","title":"An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confi","description":"An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system.","publishedAt":"2026-09-14T00:00:00.000Z","updatedAt":"2026-09-14T18:12:49.998Z","severity":{"score":5.4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","source":"mitre"},"assigner":"mitre","products":["TYPO3 femanager"],"affected":[{"vendor":"TYPO3","product":"femanager","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.2.3","versionType":"semver"}]}],"references":["https://typo3.org/security/advisory/typo3-ext-sa-2023-010"],"weaknesses":["CWE-863"],"ingestedAt":"2026-10-29T20:06:33.064Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/50xxx/CVE-2023-50460.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-50460","state":"PUBLISHED","datePublished":"2026-09-14T00:00:00.000Z","dateUpdated":"2026-09-14T18:12:49.998Z","assignerShortName":"mitre","assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateReserved":"2023-12-10T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system."}],"affected":[{"vendor":"TYPO3","product":"femanager","defaultStatus":"unaffected","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.2.3","versionType":"semver"}]}],"references":[{"url":"https://typo3.org/security/advisory/typo3-ext-sa-2023-010"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-863","description":"CWE-863 Incorrect Authorization","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"mitre","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","dateUpdated":"2026-09-14T06:07:06.838Z"},"x_generator":{"engine":"enrichogram 0.0.1"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-14T14:56:28.542681Z","id":"CVE-2023-50460","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-14T18:12:49.998Z"}}]}}}