GHSA-4rvc-5hrh-qmwfHighCVSS 8.8

TYPO3 SQL injection vulnerability on the backend

Published
April 21, 2022
Last Modified
February 7, 2024

🔗 CVE IDs covered (1)

CVE-2010-3662 →

📋 Description

TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows SQL Injection on the backend.

🎯 Affected products4

  • composer/typo3/cms-backend:< 4.1.14
  • composer/typo3/cms-backend:>= 4.2.0, < 4.2.13
  • composer/typo3/cms-backend:>= 4.3.0, < 4.3.4
  • composer/typo3/cms-backend:>= 4.4.0, < 4.4.1

🔗 References (5)