Vulnerabilities > CVE-2020-25026 - Unspecified vulnerability in Derhansen Event Management and Registration

CVSS 4.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

derhansen

NVD

Published: 2020-09-02

Updated: 2021-07-21

Summary

The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.

Vulnerable Configurations

Part	Description	Count
Application	Derhansen Derhansen Event Management AND Registration 5.0.0 Derhansen Event Management AND Registration 5.0.1 Derhansen Event Management AND Registration 5.1.0 Derhansen Event Management AND Registration 0.5.0 Derhansen Event Management AND Registration 0.5.1 Derhansen Event Management AND Registration 0.5.2 Derhansen Event Management AND Registration 0.5.3 Derhansen Event Management AND Registration 1.0.0 Derhansen Event Management AND Registration 1.0.1 Derhansen Event Management AND Registration 1.1.0 Derhansen Event Management AND Registration 1.1.1 Derhansen Event Management AND Registration 1.2.0 Derhansen Event Management AND Registration 1.3.0 Derhansen Event Management AND Registration 1.3.1 Derhansen Event Management AND Registration 1.4.0 Derhansen Event Management AND Registration 1.4.1 Derhansen Event Management AND Registration 1.5.0 Derhansen Event Management AND Registration 1.5.1 Derhansen Event Management AND Registration 1.6.0 Derhansen Event Management AND Registration 1.6.1 Derhansen Event Management AND Registration 1.7.0 Derhansen Event Management AND Registration 1.7.1 Derhansen Event Management AND Registration 1.8.0 Derhansen Event Management AND Registration 1.8.1 Derhansen Event Management AND Registration 2.0.0 Derhansen Event Management AND Registration 2.1.0 Derhansen Event Management AND Registration 3.0.0 Derhansen Event Management AND Registration 3.0.1 Derhansen Event Management AND Registration 3.0.2 Derhansen Event Management AND Registration 3.0.3 Derhansen Event Management AND Registration 3.0.4 Derhansen Event Management AND Registration 3.0.5 Derhansen Event Management AND Registration 3.0.6 Derhansen Event Management AND Registration 3.0.7 Derhansen Event Management AND Registration 3.0.8 Derhansen Event Management AND Registration 4.0.0 Derhansen Event Management AND Registration 4.0.1 Derhansen Event Management AND Registration 4.1.0 Derhansen Event Management AND Registration 4.1.1 Derhansen Event Management AND Registration 4.1.2 Derhansen Event Management AND Registration 4.1.3 Derhansen Event Management AND Registration 4.2.0 Derhansen Event Management AND Registration 4.2.1 Derhansen Event Management AND Registration 4.2.2 Derhansen Event Management AND Registration 4.3.0	45

Summary

Vulnerable Configurations

References