GitHub Advisoryadvisory · Packagist

GHSA-jjwh-4x89-7f5w reint_downloadmanager TYPO3 Extension is susceptible to Insecure Direct Object Reference

MEDIUM Published 2025-05-21 Modified 2025-05-21 Official page ↗
Aliases
CVE-2025-48207
Ecosystem
Packagist
Packages
renolit/reint-downloadmanager
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:F/RL:O/RC:C
Weaknesses
CWE-425, CWE-639
Reviewed
2025-05-21

Affected packages

• Packagist renolit/reint-downloadmanager: >= 5.0.0, < 5.0.1 → fixed in 5.0.1 • Packagist renolit/reint-downloadmanager: < 4.0.2 → fixed in 4.0.2

Description

Insecure Direct Object Reference in the reint_downloadmanager TYPO3 extension allows remote attackers to read arbitrary files via the downloaduid parameter in the downloadAction.

Related

Alias · CVE (1)

  • CVE-2025-48207 The reint_downloadmanager extension through 5.0.0 for TYPO3 allows Insecure Direct Object Reference. vulnerability

Weakness · CWE (2)

  • CWE-425 Direct Request weakness
  • CWE-639 Authorization Bypass Through User-Controlled Key weakness

References