CVE-2024-38874
An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing access checks in the management plugin lead to an insecure d…
Published: 2024-06-21 · CVSS: 5.4 · CVSS 3.1
An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing access checks in the management plugin lead to an insecure direct object reference (IDOR) vulnerability with the potential to activate or delete various events for unauthenticated users.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7