https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 12:52:18 +0000 https://vulnerability.circl.lu/vuln/cve-2026-77141 <p><strong>Affected:</strong> TYPO3 Extension &#34;Club Directory&#34;</p> <p>The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activate action and overwrite that record, or publish one still awaiting approval, without owning it.</p> <p><strong>Affected:</strong> TYPO3 Extension &#34;Club Directory&#34;</p> <p>The extension resolves the targeted club record from a user-supplied request argument in its frontend edit, update, and activate actions, but performs no ownership check in any of them. An unauthenticated visitor who knows the UID of a club record can send a direct request to the update or activate action and overwrite that record, or publish one still awaiting approval, without owning it.</p> https://vulnerability.circl.lu/vuln/cve-2026-77141