Merge pull request #752 from eliashaeussler/typo3-extension-security-releases

Add CVE-2025-48200, CVE-2025-48201, CVE-2025-48202, CVE-2025-48203 and CVE-2025-48207

Author: stof

clickstorm/cs-seo/CVE-2025-48203.yaml

@@ -0,0 +1,18 @@
+title: 'TYPO3-EXT-SA-2025-005: Cross-Site Scripting in extension "[clickstorm] SEO" (cs_seo)'
+link: 'https://typo3.org/security/advisory/typo3-ext-sa-2025-005'
+cve: CVE-2025-48203
+branches:
+    main:
+        time: '2025-05-20 08:59:00'
+        versions: ['>=9.0.0', '<9.3.0']
+    8.x:
+        time: '2025-05-20 09:14:00'
+        versions: ['>=8.0.0', '<8.4.0']
+    7.x:
+        time: '2025-05-20 09:22:00'
+        versions: ['>=7.0.0', '<7.5.0']
+    6.x:
+        time: '2025-05-20 09:35:00'
+        versions: ['>=6.3.0', '<6.8.0']
+reference: 'composer://clickstorm/cs-seo'
+

in2code/femanager/CVE-2025-48202.yaml

@@ -0,0 +1,18 @@
+title: 'TYPO3-EXT-SA-2025-006: Insecure Direct Object Reference in extension "femanager" (femanager)'
+link: 'https://typo3.org/security/advisory/typo3-ext-sa-2025-006'
+cve: CVE-2025-48202
+branches:
+    main:
+        time: '2025-05-16 16:51:00'
+        versions: ['>=8.0.0', '<8.2.2']
+    7.x:
+        time: '2025-05-16 16:47:00'
+        versions: ['>=7.0.0', '<7.4.2'] 
+    6.x:
+        time: '2025-05-16 16:42:00'
+        versions: ['>=6.0.0', '<6.4.1']
+    5.x:
+        time: '2025-05-16 15:52:00'
+        versions: ['>=5.5.0', '<5.5.5']
+reference: 'composer://in2code/femanager'
+

nitsan/ns-backup/CVE-2025-48201.yaml

@@ -0,0 +1,9 @@
+title: 'TYPO3-EXT-SA-2025-007: Multiple vulnerabilities in extension "Backup Plus" (ns_backup)'
+link: 'https://typo3.org/security/advisory/typo3-ext-sa-2025-007'
+cve: CVE-2025-48201
+branches:
+    main:
+        time: '2025-05-20 10:00:00'
+        versions: ['<13.0.1']
+reference: 'composer://nitsan/ns-backup'
+

renolit/reint-downloadmanager/CVE-2025-48207.yaml

@@ -0,0 +1,12 @@
+title: 'TYPO3-EXT-SA-2025-004: Insecure Direct Object Reference in extension "Download manager" (reint_downloadmanager)'
+link: 'https://typo3.org/security/advisory/typo3-ext-sa-2025-004'
+cve: CVE-2025-48207
+branches:
+    main:
+        time: '2025-05-18 21:08:00'
+        versions: ['>=5.0.0', '<5.0.1']
+    4.x:
+        time: '2025-05-19 22:03:00'
+        versions: ['<4.0.2']
+reference: 'composer://renolit/reint-downloadmanager'
+

sjbr/sr-feuser-register/CVE-2025-48200.yaml

@@ -0,0 +1,9 @@
+title: 'TYPO3-EXT-SA-2025-008: Multiple vulnerabilities in extension "Front End User Registration" (sr_feuser_register)'
+link: 'https://typo3.org/security/advisory/typo3-ext-sa-2025-008'
+cve: CVE-2025-48200
+branches:
+    main:
+        time: '2025-05-20 00:07:00'
+        versions: ['>=5.1.0', '<12.5.0']
+reference: 'composer://sjbr/sr-feuser-register'
+