Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Derhansen

#53848of 56,330
4.3Total CVSS
Vulnerabilities · 1
PT-2024-20529
4.3
2024-02-13
Unknown · Sf Event Mgt · CVE-2024-24751
**Name of the Vulnerable Software and Affected Versions** sf event mgt versions prior to 7.4.0 **Description** The existing access control check for events in the backend module of sf event mgt, an event management and registration extension for the TYPO3 CMS, got broken during the update to TYPO3 12.4. This occurred because the `RedirectResponse` from the `$this->redirect()` function was never handled. **Recommendations** For versions prior to 7.4.0, upgrade to version 7.4.0 to address the issue. As a temporary workaround, consider disabling the `$this->redirect()` function in the affected backend module until the upgrade is applied. Restrict access to the backend module to minimize the risk of exploitation.