{"action":"Upgrade sjbr/sr-feuser-register to 12.5.0 or later.","affected":[{"fixed":"12.5.0","introduced":"5.1.0"}],"component":"sjbr/sr-feuser-register","cve_ids":["CVE-2025-48205"],"ecosystem":"Packagist","epss":0.00368,"exploited":false,"fixed_versions":["12.5.0"],"ghsa_id":"GHSA-cvgc-mx2w-h3w8","id":"tcs_01M5KF17MSR3T51AQDFZJYRE5P","modified_at":"2025-05-21T20:42:13.735298Z","published_at":"2025-05-21T18:33:30Z","references":["https://osv.dev/vulnerability/GHSA-cvgc-mx2w-h3w8","https://nvd.nist.gov/vuln/detail/CVE-2025-48205","https://codeberg.org/sjbr/sr-feuser-register","https://codeberg.org/sjbr/sr-feuser-register/commit/be44f61a475371c36b2035cbb523b56f5e34267d","https://typo3.org/security/advisory/typo3-ext-sa-2025-008"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-cvgc-mx2w-h3w8","url":"https://osv.dev/vulnerability/GHSA-cvgc-mx2w-h3w8"}],"summary":"The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference"}