CVE-2019-19850

CVE-2019-19850 affects TYPO3 versions: 8.x before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. The issue is a SQL injection in the QueryGenerator class caused by mishandling escaping of user-submitted content. Exploitation requires the system extension ext:lowlevel and a backend administrat...