CVE-2024-38874
1 advisory.
Packagist/jweiland/events2 CVE-2024-38874: medium 5.4, EPSS 0.29%
events2 TYPO3 extension insecure direct object reference (IDOR) vulnerability
Action: Upgrade jweiland/events2 to 8.3.8 or later.
composer require jweiland/events2:8.3.8composer require jweiland/events2:9.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.3.8 | - |
| 9.0.0 | 9.0.6 | - |
Fixed versions
| 8.3.8 | 9.0.6 |
Sources
- osv: GHSA-cchp-3rq6-69wj
- https://nvd.nist.gov/vuln/detail/CVE-2024-38874
- https://github.com/FriendsOfPHP/security-advisories/blob/master/jweiland/events2/CVE-2024-38874.yaml
- https://github.com/jweiland-net/events2
- https://typo3.org/security/advisory/typo3-ext-sa-2024-003
CVE-2024-38874 · published · modified · JSON