Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS1ycHhnLWhnNzktaDhxOc4AAtZ0

SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

Permalink: https://github.com/advisories/GHSA-rpxg-hg79-h8q9
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ycHhnLWhnNzktaDhxOc4AAtZ0
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Critical
Classification: General
Published: almost 2 years ago
Updated: over 1 year ago


CVSS Score: 9.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-rpxg-hg79-h8q9, CVE-2022-35628
References: Blast Radius: 1.0

Affected Packages

packagist:in2code/lux
Dependent packages: 0
Dependent repositories: 0
Downloads: 22,768 total
Affected Version Ranges: < 17.6.1, >= 18.0.0, < 24.0.2
Fixed in: 17.6.1, 24.0.2
All affected versions: 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.4.0, 2.5.0, 3.0.0, 4.0.0, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 5.0.0, 5.1.0, 6.0.0, 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.0.1, 7.0.2, 7.1.0, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.3.0, 8.0.0, 8.0.1, 8.1.0, 8.1.1, 8.2.0, 8.2.1, 8.2.2, 9.0.0, 9.1.0, 9.1.1, 9.1.2, 10.0.0, 10.0.1, 10.0.2, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.3.1, 11.3.2, 11.4.0, 11.5.0, 11.6.0, 11.7.0, 11.7.1, 11.8.0, 12.0.0, 13.0.0, 13.1.0, 13.2.0, 13.3.0, 13.4.0, 13.4.1, 13.4.2, 14.0.0, 14.0.1, 14.0.2, 14.0.3, 14.1.0, 14.2.0, 14.3.0, 14.3.1, 14.3.2, 14.4.0, 14.4.1, 14.4.2, 15.0.0, 15.0.1, 15.0.2, 15.0.3, 15.1.0, 15.2.0, 15.2.1, 15.2.2, 15.3.0, 15.3.1, 16.0.0, 16.0.1, 16.0.2, 17.0.0, 17.0.1, 17.0.2, 17.1.0, 17.1.1, 17.1.2, 17.2.0, 17.2.1, 17.2.2, 17.2.3, 17.3.0, 17.4.0, 17.4.1, 17.5.0, 17.6.0, 18.0.0, 18.1.0, 18.1.1, 19.0.0, 19.0.1, 19.0.2, 19.0.3, 20.0.0, 20.0.1, 20.1.0, 20.2.0, 20.2.1, 20.2.2, 21.0.0, 21.1.0, 21.2.0, 21.3.0, 21.4.0, 22.0.0, 22.1.0, 22.2.0, 22.3.0, 22.3.1, 22.3.2, 22.3.3, 22.4.0, 22.5.0, 22.6.0, 23.0.0, 23.1.0, 23.2.0, 23.2.1, 23.3.0, 24.0.0, 24.0.1
All unaffected versions: 17.6.1, 17.7.0, 17.7.1, 24.0.2, 24.1.0, 24.2.0, 25.0.0, 25.1.0, 25.2.0, 25.3.0, 26.0.0, 26.1.0, 26.2.0, 26.2.1, 26.3.0, 26.3.1, 26.4.0, 26.4.1, 26.4.2, 26.5.0, 26.5.1, 26.5.2, 26.6.0, 26.7.0, 26.8.0, 27.0.0, 27.1.0, 27.1.1, 27.1.2, 27.1.3, 27.1.4, 27.1.5, 27.1.6, 27.1.7, 27.2.0, 28.0.0, 28.1.0, 28.1.1, 28.2.0, 28.3.0, 28.3.1, 28.3.2, 28.3.3, 29.0.0, 30.0.0, 30.1.0, 31.0.0, 31.1.0, 31.1.1, 31.1.2, 31.2.3, 31.2.4, 32.0.0, 32.1.0, 32.1.1, 32.2.0, 32.2.1, 32.2.2, 32.2.3, 33.0.0, 33.0.1, 33.1.0, 33.1.1, 33.2.0, 33.2.1, 33.3.0, 33.3.1, 34.0.0, 34.0.1, 34.0.2, 34.0.3, 34.1.0, 34.2.0, 34.3.0, 34.3.1, 34.3.2, 34.3.3, 35.0.0, 35.0.1, 35.0.2, 35.1.0