« Volver al listado

CVE-2022-44543

Estado: ModificadaMedia (5.3)—

The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

In2code — Femanager

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-44543",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-12-12T17:15:07.663",
  "references": [
    {
      "url": "https://typo3.org/help/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://typo3.org/security/advisory/typo3-ext-sa-2022-015",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://typo3.org/help/security-advisories",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://typo3.org/security/advisory/typo3-ext-sa-2022-015",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The femanager extension before 5.5.2, 6.x before 6.3.3, and 7.x before 7.0.1 for TYPO3 allows creation of frontend users in restricted groups (if there is a usergroup field on the registration form). This occurs because the usergroup.inList protection mechanism is mishandled."
    },
    {
      "lang": "es",
      "value": "La extensión femanager anterior a 5.5.2, 6.x anterior a 6.3.3 y 7.x anterior a 7.0.1 para TYPO3 permite la creación de usuarios frontend en grupos restringidos (si hay un campo de grupo de usuarios en el formulario de registro). Esto ocurre porque el mecanismo de protección usergroup.inList no se maneja correctamente."
    }
  ],
  "lastModified": "2026-06-17T05:08:28.283",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0EAE8E8-47BE-4D35-BE8C-530CC4668BF2",
              "versionEndExcluding": "5.5.2"
            },
            {
              "criteria": "cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93866A98-CFC8-4CFB-B227-CA98ADEA8FEC",
              "versionEndExcluding": "6.3.3",
              "versionStartIncluding": "6.0.0"
            },
            {
              "criteria": "cpe:2.3:a:in2code:femanager:7.0.0:*:*:*:*:typo3:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADE46436-77C4-4E8E-A3DF-1C26D55B8F69"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}