Beveiligingsadvies

CVE-2026-77134

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-25 09:00:40

Laatst bijgewerkt 2026-08-25 14:51:54

Toegewezen door TYPO3

CVSS-score 8.3

Status PUBLISHED

Beschrijving

The extension fails to require the dedicated admin confirmation token when processing an admin-approval request, so a regular user confirmation hash, obtainable by any visitor through the public resend-confirmation action, is sufficient to self-approve a pending account awaiting admin approval.

← Alle CVE's bekijken Bekijk op cve.org ↗