CVE-2024-24751: derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module

The vulnerability stems from the fact that checkEventAccess() in the affected versions called $this->redirect('list') but did not return the RedirectResponse. Controller actions like exportAction, indexNotifyAction, and notifyAction relied on checkEventAccess to enforce access control but continued execution even when a redirect was triggered. The commit diff explicitly modifies these functions to check the return value of checkEventAccess and return the redirect, confirming their role in the vulnerability. The CVE description and patch context directly link the unhandled RedirectResponse to these functions.