The sf_event_mgt (aka Event management and registration) extension before 4.3.1 and 5.x before 5.1.1 for TYPO3 allows Information Disclosure (participant data, and event data via email) because of Broken Access Control.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Event_management_and_registration | Derhansen | * | 4.3.1 (excluding) |
| Event_management_and_registration | Derhansen | 5.0.0 (including) | 5.1.1 (excluding) |