Is CVE-2023-50460 being exploited?

No public exploit is currently tracked.

How severe is CVE-2023-50460?

CVE-2023-50460 has a CVSS v3 severity of MEDIUM (5.4).

Back

CVE-2023-50460

Description

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system.