GHSA-463c-jhp2-4mm7
The Backup Plus extension for TYPO3 (ns_backup) allows command injections
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | nitsan/ns-backup | < 13.0.1 | 13.0.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
The ns_backup extension through 13.0.0 for TYPO3 allows command injection when creating a backup. An authenticated backend user with access to the extensions backend module is required to exploit the vulnerability.
References
External links from the advisory. They lead to third-party sites.