~ / search / GHSA-rpxg-hg79-h8q9

GHSA-rpxg-hg79-h8q9

SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-35628

Packages

EcosystemPackageAffectedFixed in
Packagist in2code/lux >= 18.0.0, < 24.0.2 24.0.2
Packagist in2code/lux < 17.6.1 17.6.1

Details

As written in the advisory (Markdown source, shown as plain text).

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

References

External links from the advisory. They lead to third-party sites.