high8.6
CVE-2025-48205
The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference
Impact
The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. This allows attackers to read arbitrary files.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | sjbr/sr-feuser-register | >= 5.1.0, < 12.5.0 | 12.5.0 |
Affected products
| Product | Affected versions |
|---|---|
| Sr Feuser Register Extension | through 12.4.8 |
Versions were read from the advisory text. No structured product data has been published for this record yet.