CVE-2020-25026
- Source
- https://cve.org/CVERecord?id=CVE-2020-25026
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-25026.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-25026
- Aliases
- Published
- 2020-09-02T17:15:12.533Z
- Modified
- 2026-02-03T07:09:27.342992Z
- Severity
-
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
The sfeventmgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.
- References