{"id":"CVE-2023-25014","details":"An issue was discovered in the femanager extension before 5.5.3, 6.x before 6.3.4, and 7.x before 7.1.0 for TYPO3. Missing access checks in the InvitationController allow an unauthenticated user to delete all frontend users.","aliases":["GHSA-3p9x-xxx6-2w4p"],"modified":"2026-08-12T03:51:46.101870405Z","published":"2023-02-02T00:00:00Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25014.json","unresolved_ranges":[{"extracted_events":[{"fixed":"5.5.3"},{"introduced":"6.x"},{"fixed":"6.3.4"},{"introduced":"7.x"},{"fixed":"7.1.0"}],"source":"DESCRIPTION"}],"cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/25xxx/CVE-2023-25014.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25014"},{"type":"ADVISORY","url":"https://typo3.org/help/security-advisories"},{"type":"ADVISORY","url":"https://typo3.org/security/advisory/typo3-ext-sa-2023-001"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/in2code-de/femanager","events":[{"introduced":"0"},{"fixed":"74a23c5f98f3c843f4ff657ed6cf75b6d8c5bdee"},{"introduced":"9a09b57bb3f4b30a8aeafe6da114f81030495bc4"},{"fixed":"83565c7ba1cd89672a2066141a4dce2298c7a093"},{"introduced":"15223fcc5ef859785b8648980e2dfaf9ac6b4b7c"},{"fixed":"1162f31b10ab052a7325ed1041eea4c5b12e0cb0"}],"database_specific":{"cpe":"cpe:2.3:a:in2code:femanager:*:*:*:*:*:typo3:*:*","extracted_events":[{"introduced":"0"},{"fixed":"5.5.3"},{"introduced":"6.0.0"},{"fixed":"6.3.4"},{"introduced":"7.0.0"},{"fixed":"7.1.0"}],"source":"CPE_RANGE"}}],"versions":["5.5.2","6.3.3","7.0.1","7.0.0","5.5.1","6.3.1","5.5.0","5.4.2","5.4.1","5.4.0","5.3.1","5.3.0","5.2.0","5.1.1","5.1.0","5.0.0","4.2.5","4.2.4","4.2.3","4.2.2","4.2.1","4.2.0","4.1.1","2.6.0","4.1.0","4.0.2","4.0.1","4.0.0","3.3.0","3.2.0","3.1.3","3.1.2","3.1.1","3.1.0","3.0.2","3.0.1","3.0.0","2.5.1","2.5.0","2.4.0","2.3.0","2.2.0","2.1.0","2.0.1","2.0.0","1.5.2","1.5.0","1.5.1","1.4.3","1.4.2","1.4.1","1.4.0","1.2.0","1.0.10","1.0.8","1.0.7","1.0.6","1.0.5","1.0.4","1.0.3","1.0.2","1.0.1","1.0.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-25014.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AC:L/AV:N/A:L/C:L/I:H/PR:N/S:U/UI:N"}]}