What is CVE-2023-50460?

CVE-2023-50460 is a medium-severity vulnerability in TYPO3 Femanager, classified under Incorrect Authorization. CVSS score: 5.4/10. Published 2026-09-14.

How severe is CVE-2023-50460?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Auth bypass in TYPO3 Femanager

CVE-2023-50460

An issue was discovered in the femanager extension 7.x before 7.2.3 for TYPO3. The backend module allows an authenticated backend user to perform various actions (userLogout, confirmUser, refuseUser, and resendUserConfirmation) for any frontend user in the system.

Vulnerability class: Broken Access Control

EPSS: 0.002 (14.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L.

Affected products

Typo3 Femanager

Weakness classification (CWE)

CWE-863 — Incorrect Authorization

References

cve@mitre.org

Frequently asked questions

What is CVE-2023-50460?: CVE-2023-50460 is a medium-severity vulnerability in TYPO3 Femanager, classified under Incorrect Authorization. CVSS score: 5.4/10. Published 2026-09-14.
How severe is CVE-2023-50460?: Medium severity. CVSS v3 base score is 5.4 out of 10.