Lucene search
Veracode Vulnerability DatabaseVERACODE:26596HistorySep 03, 2020 - 5:00 a.m.
Information Disclosure
2020-09-0305:00:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
22.7%
derhansen/sf_event_mgt is vulnerable to information disclosure. Missing access checks in the backend module allows an authenticated user to export restricted participant data for events or send emails to event participants for events which the user does not have access to.
| CPE | Name | Operator | Version |
|---|---|---|---|
| derhansen/sf_event_mgt | le | 5.1.0 | |
| derhansen/sf_event_mgt | le | 4.3.0 |
Related
prion
prion
Improper access control
2020-09-02 17:15:00
osv
osv
Information Disclosure in TYPO3 extension sf_event_mgt
2020-09-02 18:03:26
CVE-2020-25026
2020-09-02 17:15:12
typo3
typo3
github
github
Information Disclosure in TYPO3 extension sf_event_mgt
2020-09-02 18:03:26
cve
cve
CVE-2020-25026
2020-09-02 17:15:12
cvelist
cvelist
CVE-2020-25026
2020-09-02 16:17:34
nvd
nvd
CVE-2020-25026
2020-09-02 17:15:12