Insecure Direct Object Reference in Femanager Extension for TYPO3

CVE-2025-7900

What is CVE-2025-7900?

The femanager extension for TYPO3 is vulnerable to Insecure Direct Object Reference, allowing attackers to modify userdata without proper authorization. This flaw affects multiple versions of the extension, specifically those prior to 7.0.0 and the ranges of 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0. As a result, unauthorized users can exploit this vulnerability to alter sensitive user data, posing a significant security threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References