Medium severity6.5NVD Advisory· Published Jul 22, 2025· Updated Jun 17, 2026
CVE-2025-7900
CVE-2025-7900
Description
The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
in2code/femanagerPackagist | < 6.4.2 | 6.4.2 |
in2code/femanagerPackagist | >= 7.0.0, < 7.5.3 | 7.5.3 |
in2code/femanagerPackagist | >= 8.0.0, < 8.3.1 | 8.3.1 |
Affected products
3- TYPO3/Extension "femanager"v5Range: 8.0.0
Patches
Vulnerability mechanics
References
4- github.com/advisories/GHSA-rc5f-3hfv-jxp2ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2025-7900ghsaADVISORY
- typo3.org/security/advisory/typo3-ext-sa-2025-010nvdVendor AdvisoryWEB
- github.com/in2code-de/femanager/commit/9bd9fbded4cf31f69bfe03c55d406e79050f8069ghsaWEB
News mentions
0No linked articles in our index yet.