What is CVE-2024-38874?

CVE-2024-38874 is a medium-severity vulnerability in N/a, classified under Protection Mechanism Failure. CVSS score: 5.4/10. Published 2024-06-21.

How severe is CVE-2024-38874?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Vulnerability in N/a

CVE-2024-38874

An issue was discovered in the events2 (aka Events 2) extension before 8.3.8 and 9.x before 9.0.6 for TYPO3. Missing access checks in the management plugin lead to an insecure direct object reference (IDOR) vulnerability with the potential to activate or delete various events for unauthenticated users.

EPSS: 0.003 (21.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-693 — Protection Mechanism Failure

References

cve@mitre.org

Frequently asked questions

What is CVE-2024-38874?: CVE-2024-38874 is a medium-severity vulnerability in N/a, classified under Protection Mechanism Failure. CVSS score: 5.4/10. Published 2024-06-21.
How severe is CVE-2024-38874?: Medium severity. CVSS v3 base score is 5.4 out of 10.