Search

Find a vulnerability

Search criteria

    4 vulnerabilities found for Extension "Event management and registration" by TYPO3

    CVE-2026-77129 (GCVE-0-2026-77129)

    Vulnerability from nvd – Published: 2026-08-25 09:00 – Updated: 2026-08-25 14:07
    VLAI
    Title
    Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)
    Summary
    The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript content objects. Exploitation of this issue requires an authenticated backend account with edit access to the event registration plugin or backend module.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-25 14:07 UTC
    CWE
    • CWE-1336 - Improper Neutralization of Special Elements Used in a Template Engine
    References
    Impacted products
    Vendor Product Version
    TYPO3 Extension "Event management and registration" Affected: 9.0.0 , < 9.0.3 (semver)
    Affected: 8.0.0 , < 8.6.2 (semver)
    Affected: 7.0.0 , < 7.9.3 (semver)
    Affected: 6.0.0 , < 6.7.2 (semver)
    Affected: 0 , < 5.9.3 (semver)
    Create a notification for this product.
    Date Public
    2026-08-25 09:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-77129",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-25T14:07:39.224226Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-25T14:07:46.294Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://packagist.org/",
              "defaultStatus": "unaffected",
              "packageName": "derhansen/sf_event_mgt",
              "product": "Extension \"Event management and registration\"",
              "repo": "https://github.com/derhansen/sf_event_mgt",
              "vendor": "TYPO3",
              "versions": [
                {
                  "lessThan": "9.0.3",
                  "status": "affected",
                  "version": "9.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "8.6.2",
                  "status": "affected",
                  "version": "8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.9.3",
                  "status": "affected",
                  "version": "7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "6.7.2",
                  "status": "affected",
                  "version": "6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "5.9.3",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Torben Hansen"
            }
          ],
          "datePublic": "2026-08-25T09:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript content objects. Exploitation of this issue requires an authenticated backend account with edit access to the event registration plugin or backend module."
                }
              ],
              "value": "The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript content objects. Exploitation of this issue requires an authenticated backend account with edit access to the event registration plugin or backend module."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 7.7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1336",
                  "description": "CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-25T09:00:44.104Z",
            "orgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
            "shortName": "TYPO3"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://typo3.org/security/advisory/typo3-ext-sa-2026-023"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Server-Side Template Injection in extension \"Event management and registration\" (sf_event_mgt)",
          "x_generator": {
            "engine": "Vulnogram 1.0.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "assignerShortName": "TYPO3",
        "cveId": "CVE-2026-77129",
        "datePublished": "2026-08-25T09:00:44.104Z",
        "dateReserved": "2026-08-20T13:10:12.062Z",
        "dateUpdated": "2026-08-25T14:07:46.294Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-77128 (GCVE-0-2026-77128)

    Vulnerability from nvd – Published: 2026-08-25 09:00 – Updated: 2026-08-25 14:06
    VLAI
    Title
    Broken Access Control in extension "Event management and registration" (sf_event_mgt)
    Summary
    The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires only that disableOverrideDemand is not enabled.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-25 14:06 UTC
    CWE
    References
    Impacted products
    Vendor Product Version
    TYPO3 Extension "Event management and registration" Affected: 9.0.0 , < 9.0.3 (semver)
    Affected: 8.0.0 , < 8.6.2 (semver)
    Affected: 7.0.0 , < 7.9.3 (semver)
    Affected: 6.0.0 , < 6.7.2 (semver)
    Affected: 0 , < 5.9.3 (semver)
    Create a notification for this product.
    Date Public
    2026-08-25 09:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-77128",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-25T14:06:05.110383Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-25T14:06:14.408Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://packagist.org/",
              "defaultStatus": "unaffected",
              "packageName": "derhansen/sf_event_mgt",
              "product": "Extension \"Event management and registration\"",
              "repo": "https://github.com/derhansen/sf_event_mgt",
              "vendor": "TYPO3",
              "versions": [
                {
                  "lessThan": "9.0.3",
                  "status": "affected",
                  "version": "9.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "8.6.2",
                  "status": "affected",
                  "version": "8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.9.3",
                  "status": "affected",
                  "version": "7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "6.7.2",
                  "status": "affected",
                  "version": "6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "5.9.3",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Torben Hansen"
            }
          ],
          "datePublic": "2026-08-25T09:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the \u003ccode\u003edisableOverrideDemand\u003c/code\u003e plugin setting is active. Exploitation of this issue requires only that \u003ccode\u003edisableOverrideDemand\u003c/code\u003e is not enabled."
                }
              ],
              "value": "The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires only that disableOverrideDemand is not enabled."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-862",
                  "description": "CWE-862 Missing Authorization",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-25T09:00:44.929Z",
            "orgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
            "shortName": "TYPO3"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://typo3.org/security/advisory/typo3-ext-sa-2026-023"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Broken Access Control in extension \"Event management and registration\" (sf_event_mgt)",
          "x_generator": {
            "engine": "Vulnogram 1.0.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "assignerShortName": "TYPO3",
        "cveId": "CVE-2026-77128",
        "datePublished": "2026-08-25T09:00:44.929Z",
        "dateReserved": "2026-08-20T13:10:12.062Z",
        "dateUpdated": "2026-08-25T14:06:14.408Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-77128 (GCVE-0-2026-77128)

    Vulnerability from cvelistv5 – Published: 2026-08-25 09:00 – Updated: 2026-08-25 14:06
    VLAI
    Title
    Broken Access Control in extension "Event management and registration" (sf_event_mgt)
    Summary
    The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires only that disableOverrideDemand is not enabled.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-25 14:06 UTC
    CWE
    References
    Impacted products
    Vendor Product Version
    TYPO3 Extension "Event management and registration" Affected: 9.0.0 , < 9.0.3 (semver)
    Affected: 8.0.0 , < 8.6.2 (semver)
    Affected: 7.0.0 , < 7.9.3 (semver)
    Affected: 6.0.0 , < 6.7.2 (semver)
    Affected: 0 , < 5.9.3 (semver)
    Create a notification for this product.
    Date Public
    2026-08-25 09:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-77128",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-25T14:06:05.110383Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-25T14:06:14.408Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://packagist.org/",
              "defaultStatus": "unaffected",
              "packageName": "derhansen/sf_event_mgt",
              "product": "Extension \"Event management and registration\"",
              "repo": "https://github.com/derhansen/sf_event_mgt",
              "vendor": "TYPO3",
              "versions": [
                {
                  "lessThan": "9.0.3",
                  "status": "affected",
                  "version": "9.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "8.6.2",
                  "status": "affected",
                  "version": "8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.9.3",
                  "status": "affected",
                  "version": "7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "6.7.2",
                  "status": "affected",
                  "version": "6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "5.9.3",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Torben Hansen"
            }
          ],
          "datePublic": "2026-08-25T09:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the \u003ccode\u003edisableOverrideDemand\u003c/code\u003e plugin setting is active. Exploitation of this issue requires only that \u003ccode\u003edisableOverrideDemand\u003c/code\u003e is not enabled."
                }
              ],
              "value": "The extension fails to enforce enable-field restrictions on a repository query parameter. An unauthenticated remote user can pass a demand-override parameter to view hidden or time-restricted events, unless the disableOverrideDemand plugin setting is active. Exploitation of this issue requires only that disableOverrideDemand is not enabled."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 6.3,
                "baseSeverity": "MEDIUM",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "NONE",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "NONE",
                "vulnConfidentialityImpact": "LOW",
                "vulnIntegrityImpact": "NONE",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-862",
                  "description": "CWE-862 Missing Authorization",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-25T09:00:44.929Z",
            "orgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
            "shortName": "TYPO3"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://typo3.org/security/advisory/typo3-ext-sa-2026-023"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Broken Access Control in extension \"Event management and registration\" (sf_event_mgt)",
          "x_generator": {
            "engine": "Vulnogram 1.0.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "assignerShortName": "TYPO3",
        "cveId": "CVE-2026-77128",
        "datePublished": "2026-08-25T09:00:44.929Z",
        "dateReserved": "2026-08-20T13:10:12.062Z",
        "dateUpdated": "2026-08-25T14:06:14.408Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }

    CVE-2026-77129 (GCVE-0-2026-77129)

    Vulnerability from cvelistv5 – Published: 2026-08-25 09:00 – Updated: 2026-08-25 14:07
    VLAI
    Title
    Server-Side Template Injection in extension "Event management and registration" (sf_event_mgt)
    Summary
    The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript content objects. Exploitation of this issue requires an authenticated backend account with edit access to the event registration plugin or backend module.
    SSVC
    Exploitation: none Automatable: no Technical Impact: total
    CISA Coordinator · CISA-ADP (v2.0.3)
    Decision recorded 2026-08-25 14:07 UTC
    CWE
    • CWE-1336 - Improper Neutralization of Special Elements Used in a Template Engine
    References
    Impacted products
    Vendor Product Version
    TYPO3 Extension "Event management and registration" Affected: 9.0.0 , < 9.0.3 (semver)
    Affected: 8.0.0 , < 8.6.2 (semver)
    Affected: 7.0.0 , < 7.9.3 (semver)
    Affected: 6.0.0 , < 6.7.2 (semver)
    Affected: 0 , < 5.9.3 (semver)
    Create a notification for this product.
    Date Public
    2026-08-25 09:00
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2026-77129",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2026-08-25T14:07:39.224226Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2026-08-25T14:07:46.294Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "collectionURL": "https://packagist.org/",
              "defaultStatus": "unaffected",
              "packageName": "derhansen/sf_event_mgt",
              "product": "Extension \"Event management and registration\"",
              "repo": "https://github.com/derhansen/sf_event_mgt",
              "vendor": "TYPO3",
              "versions": [
                {
                  "lessThan": "9.0.3",
                  "status": "affected",
                  "version": "9.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "8.6.2",
                  "status": "affected",
                  "version": "8.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "7.9.3",
                  "status": "affected",
                  "version": "7.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "6.7.2",
                  "status": "affected",
                  "version": "6.0.0",
                  "versionType": "semver"
                },
                {
                  "lessThan": "5.9.3",
                  "status": "affected",
                  "version": "0",
                  "versionType": "semver"
                }
              ]
            }
          ],
          "credits": [
            {
              "lang": "en",
              "type": "remediation developer",
              "value": "Torben Hansen"
            }
          ],
          "datePublic": "2026-08-25T09:00:00.000Z",
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript content objects. Exploitation of this issue requires an authenticated backend account with edit access to the event registration plugin or backend module."
                }
              ],
              "value": "The extension passes an editor-configurable email subject string directly into a Fluid template source without restriction. A backend user with edit access to the event plugin or Backend Module can supply Fluid ViewHelper syntax in this field to disclose sensitive data or execute TypoScript content objects. Exploitation of this issue requires an authenticated backend account with edit access to the event registration plugin or backend module."
            }
          ],
          "metrics": [
            {
              "cvssV4_0": {
                "Automatable": "NOT_DEFINED",
                "Recovery": "NOT_DEFINED",
                "Safety": "NOT_DEFINED",
                "attackComplexity": "LOW",
                "attackRequirements": "PRESENT",
                "attackVector": "NETWORK",
                "baseScore": 7.7,
                "baseSeverity": "HIGH",
                "exploitMaturity": "NOT_DEFINED",
                "privilegesRequired": "LOW",
                "providerUrgency": "NOT_DEFINED",
                "subAvailabilityImpact": "NONE",
                "subConfidentialityImpact": "NONE",
                "subIntegrityImpact": "NONE",
                "userInteraction": "NONE",
                "valueDensity": "NOT_DEFINED",
                "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                "version": "4.0",
                "vulnAvailabilityImpact": "HIGH",
                "vulnConfidentialityImpact": "HIGH",
                "vulnIntegrityImpact": "HIGH",
                "vulnerabilityResponseEffort": "NOT_DEFINED"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-1336",
                  "description": "CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2026-08-25T09:00:44.104Z",
            "orgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
            "shortName": "TYPO3"
          },
          "references": [
            {
              "tags": [
                "vendor-advisory"
              ],
              "url": "https://typo3.org/security/advisory/typo3-ext-sa-2026-023"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "title": "Server-Side Template Injection in extension \"Event management and registration\" (sf_event_mgt)",
          "x_generator": {
            "engine": "Vulnogram 1.0.0"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "f4fb688c-4412-4426-b4b8-421ecf27b14a",
        "assignerShortName": "TYPO3",
        "cveId": "CVE-2026-77129",
        "datePublished": "2026-08-25T09:00:44.104Z",
        "dateReserved": "2026-08-20T13:10:12.062Z",
        "dateUpdated": "2026-08-25T14:07:46.294Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }