Product
An unauthenticated broken access control vulnerability in the TYPO3 Club Directory extension allows remote attackers to overwrite or publish club records by supplying a known record UID to frontend actions.