CVE-2024-24751: Broken Access Control in derhansen/sf_event_mgt Backend Module
Summary
CVE-2024-24751: derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module. Affects derhansen/sf_event_mgt versions >= 7.0.0, < 7.4.0. Fixed in 7.4.0. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
derhansen/sf_event_mgt is a package available on Packagist that provides event management functionality for TYPO3. It allows users to create, manage, and display events on their TYPO3 websites. The package is widely used and has a range of versions, with the vulnerability affecting versions 7.0.0 to 7.4.0. The package is primarily used in the backend module of TYPO3, where administrators can perform administrative tasks related to events. However, a broken access control vulnerability has been identified in the backend module, which can lead to unauthorized access to events.
Vulnerability Detail
The broken access control vulnerability in the derhansen/sf_event_mgt backend module occurs due to a flaw in the access control check logic. During the update of the extension to TYPO3 12.4, the handling of the RedirectResponse from the $this->redirect() function was not implemented correctly. This flaw allows an attacker with lower privileges to bypass the access control check and gain unauthorized access to events in the backend module. The impact of this vulnerability is moderate, as it can lead to unauthorized access to sensitive event information.
How To Fix
Minimum fixed version
7.4.0
This is the first release that contains the fix.
composer require derhansen/sf_event_mgt:7.4.0Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If updating the derhansen/sf_event_mgt package is not immediately possible, a temporary workaround can be implemented. This workaround involves modifying the code in the backend module to handle the RedirectResponse correctly. The following code snippet demonstrates the necessary modification:
// Original code
$this->redirect($targetUrl);
// Modified code
$response = $this->redirect($targetUrl);
$response->send();
Conclusion
In conclusion, the derhansen/sf_event_mgt package is vulnerable to a broken access control issue in the backend module, which can lead to unauthorized access to events. It is recommended to update the package to version 7.4.0 or later to fix this vulnerability. If immediate updating is not possible, a temporary workaround can be implemented by modifying the code in the backend module. For further support on vulnerability remediation, you can contact DevNack.com.
See every vulnerability recorded for derhansen/sf_event_mgt →
FAQ
derhansen/sf_event_mgt is a package available on Packagist that provides event management functionality for TYPO3. It allows users to create, manage, and display events on their TYPO3 websites.
The impact of this vulnerability is moderate, as it can lead to unauthorized access to sensitive event information in the backend module of TYPO3.
To fix this vulnerability, it is recommended to update the derhansen/sf_event_mgt package to version 7.4.0 or later. This version includes a fix for the broken access control issue.
Yes, if updating the derhansen/sf_event_mgt package is not immediately possible, a temporary workaround can be implemented by modifying the code in the backend module to handle the RedirectResponse correctly.
For more information about this vulnerability, you can refer to the GitHub advisory database entry at: https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/02/GHSA-4576-pgh2-g34j/GHSA-4576-pgh2-g34j.json
References
Related vulnerabilities
Recent vulnerabilities recorded for derhansen/sf_event_mgt.
