The typo3_forum extension before 1.2.1 for TYPO3 has Incorrect Access Control.
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Link | Tags |
---|---|
https://typo3.org/help/security-advisories | third party advisory |
https://typo3.org/security/advisory/typo3-ext-sa-2020-010 | third party advisory |