WS-2018-0156

TYPO3 versions 8.5.0 to 8.7.16 and 9.0.0 to 9.3.0 fails to properly dissociate system related configuration from user generated configuration, thus is vulnerable to SQL injection and Privilege Escalation. Basically instructions can be persisted to a form definition file that were not configured t...