Typo3 Extension "Club Directory" vulnerabilities

1 vulnerability

Known vulnerabilities in Typo3 Extension "Club Directory", newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2026-77141typo3 · extension "club directory"Broken Access Control in extension "Club Directory" (clubdirectory)The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activate action and overwrite that record, or publish one still awaiting approval, without owning it.CVSS8.8HighEPSS0.41%