{"id":"GHSA-cv9j-78f7-w6v9","aliases":["CVE-2020-25025"],"title":"Incorrect Authorization in TYPO3 extension","description":"The l10nmgr (aka Localization Manager) extension before 7.4.0, 8.x before 8.7.0, and 9.x before 9.2.0 for TYPO3 allows Information Disclosure (translatable fields).","severity":"medium","score":4.3,"published":"2021-07-26T21:41:22.000Z","modified":"2026-09-10T03:49:06.309Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"localizationteam/l10nmgr","ranges":[{"events":[{"introduced":"0"},{"fixed":"7.4.0"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["7.4.0"]},{"ecosystem":"Packagist","name":"localizationteam/l10nmgr","ranges":[{"events":[{"introduced":"8.0.0"},{"fixed":"8.7.0"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["8.7.0"]},{"ecosystem":"Packagist","name":"localizationteam/l10nmgr","ranges":[{"events":[{"introduced":"9.0.0"},{"fixed":"9.2.0"}],"type":"ECOSYSTEM"}],"versions":[],"fixed":["9.2.0"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2020-25025","https://typo3.org/help/security-advisories","https://typo3.org/security/advisory/typo3-ext-sa-2020-016"],"sources":[{"name":"OSV","id":"GHSA-cv9j-78f7-w6v9","modified":"2026-09-10T03:49:06.309729959Z","url":"https://osv.dev/vulnerability/GHSA-cv9j-78f7-w6v9"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3}]}