Lucene search

K
osvGoogleOSV:GHSA-947M-VGQC-X6V4
HistoryMay 17, 2022 - 1:37 a.m.

Typo3 Backend History Module Vulnerable to SQL Injection

2022-05-1701:37:41
Google
osv.dev
2

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%

SQL injection vulnerability in the Backend History module in TYPO3 4.5.x before 4.5.21, 4.6.x before 4.6.14, and 4.7.x before 4.7.6 Due to missing encoding of user input, the history module is susceptible to SQL Injection and Cross-Site Scripting. A valid backend login is required to exploit this vulnerability.

8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.4%

Related for OSV:GHSA-947M-VGQC-X6V4