8.6

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-48205

CVE-2025-48205: The Front End User Registration extension for TYPO3 (sr_feuser_register) allows Insecure Direct Object Reference

The sr_feuser_register extension through 12.4.8 for TYPO3 allows Insecure Direct Object Reference. This allows attackers to read arbitrary files.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-48205

CVE-2025-48205:

8.6

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
sjbr/sr-feuser-register	composer	>= 5.1.0, < 12.5.0	12.5.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

I could not retrieve the commit details from codeberg.org using the available tools. The get_commit_infos tool is specific to GitHub, and fetch_url_content failed to retrieve the content of the commit page. The TYPO3 advisory describes the vulnerability (lack of authorization in a file download mechanism) but does not name specific functions. Without the actual code changes from the patch, I cannot confidently identify the vulnerable functions or provide patch evidence as required.

Based on the TYPO3 advisory (TYPO3-EXT-SA-2025-008), the vulnerability is an Insecure Direct Object Reference (IDOR) that allows attackers to read arbitrary files. This implies a function responsible for handling file downloads or access does not properly check user authorization for the requested file. However, without the specific code changes from the commit be44f61a475371c36b2035cbb523b56f5e34267d, it's impossible to name the exact function(s) and provide the required patch evidence. The advisory mentions that the extension "does not verify if a specified file identifier is authorized for download." This points to a function that takes a file identifier as input and serves the file, but the name of this function is not provided in the available information. The commit URL is on codeberg.org, which is not supported by get_commit_infos for diff extraction, and fetch_url_content was blocked by a bot protection mechanism on the site. Therefore, I cannot provide the specific vulnerable functions with the required level of detail and evidence from the patch itself. The search results also did not provide a direct link to the code changes or specific function names involved in this IDOR vulnerability within the sr_feuser_register extension for CVE-2025-48205. The advisory also mentions a Remote Code Execution (RCE) vulnerability (CVE-2025-48200) in the same extension, but the current task is focused on the IDOR (CVE-2025-48205).

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.