This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-77144 | BDVDB-2026-364461 Detail

TYPO3Extension "Events 2"

Description#

The frontend management plugin attributed a newly created event to the submitting user's organizer record only when the request supplied no organizer of its own. The accompanying permission check confirmed only that the submitting user held any organizer role. A user with frontend event management access could therefore create an event that is attributed to another organizer.

Impact#

Per CVSS v4.0: confidentiality impact low, integrity impact high, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.