{"action":"Upgrade in2code/femanager to 1.0.9 or later.","affected":[{"fixed":"1.0.9","introduced":"0"}],"component":"in2code/femanager","cve_ids":["CVE-2014-6292"],"ecosystem":"Packagist","epss":0.01333,"exploited":false,"fixed_versions":["1.0.9"],"ghsa_id":"GHSA-377v-8637-6vq6","id":"tcs_01M5KESQFP16HWK57MZPY84SHM","modified_at":"2025-04-14T17:42:11.862949Z","published_at":"2022-05-13T01:04:01Z","references":["https://osv.dev/vulnerability/GHSA-377v-8637-6vq6","https://nvd.nist.gov/vuln/detail/CVE-2014-6292","https://github.com/in2code-de/femanager","https://typo3.org/security/advisory/typo3-ext-sa-2014-002","http://typo3.org/extensions/repository/view/femanager"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-377v-8637-6vq6","url":"https://osv.dev/vulnerability/GHSA-377v-8637-6vq6"}],"summary":"TYPO3 femanager extension allows remote frontend users to modify or delete records of other frontend users"}