Extension Forum
Monthly
Missing server-side ownership verification in the TYPO3 Forum extension allows any unauthenticated visitor to overwrite the content of any forum topic. Because topic identifiers are enumerable from the public forum listing, an attacker needs no credentials, special access, or non-default configuration to target arbitrary topics. The CVSS 4.0 score of 8.8 reflects high integrity impact; no public exploit or CISA KEV listing has been identified at time of analysis.
Missing server-side ownership verification in the TYPO3 Forum extension allows any unauthenticated visitor to overwrite the content of any forum topic. Because topic identifiers are enumerable from the public forum listing, an attacker needs no credentials, special access, or non-default configuration to target arbitrary topics. The CVSS 4.0 score of 8.8 reflects high integrity impact; no public exploit or CISA KEV listing has been identified at time of analysis.