Extension Club Directory
Monthly
Unauthenticated record takeover in the TYPO3 'Club Directory' extension allows any visitor to overwrite or force-publish arbitrary club records by supplying a known record UID in requests to the frontend edit, update, and activate actions. The extension resolves records directly from user-controlled input without performing any ownership or authorization check, making this a textbook CWE-862 (Missing Authorization) / IDOR vulnerability. No public exploit has been identified at time of analysis, but exploitation is trivially simple given the network-accessible attack surface, absence of authentication, and sequential nature of TYPO3 record UIDs.
Unauthenticated record takeover in the TYPO3 'Club Directory' extension allows any visitor to overwrite or force-publish arbitrary club records by supplying a known record UID in requests to the frontend edit, update, and activate actions. The extension resolves records directly from user-controlled input without performing any ownership or authorization check, making this a textbook CWE-862 (Missing Authorization) / IDOR vulnerability. No public exploit has been identified at time of analysis, but exploitation is trivially simple given the network-accessible attack surface, absence of authentication, and sequential nature of TYPO3 record UIDs.