evoweb/sf_register · Security
TYPO3 sf_register extension allows unauthorized assignment of frontend user groups
- GHSA ID
- GHSA-v348-vr4q-fv9p
- CVE ID
- CVE-2026-46721
- Severity
- medium
- Published
- Updated
- CVSS v4
- 6.9 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Description
The create and edit flows in the TYPO3 extension sf_register do not restrict which user properties may be submitted, and do not enforce access control on the frontend user group assignment. As a result, an attacker can assign an arbitrary frontend user group to a newly registered or edited account, gaining unauthorized access to content and functionality restricted to privileged frontend user groups.
CWEs
- CWE-639 · Authorization Bypass Through User-Controlled Key