PT-2023-25310 · Typo3 · Ipandlanguageredirect Extension For Typo3

Torben Hansen · Publicado 2023-06-16 · Atualizado 2023-06-26 · CVE-2023-35782

Positive Technologies (AI Summary)

CVSS v3.1

8.2

Alta

Vetor base

AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions ipandlanguageredirect extension for TYPO3 versions prior to 5.1.2

Description The issue allows SQL Injection.

Recommendations For versions prior to 5.1.2, update to version 5.1.2 or later to resolve the issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2023-35782

GHSA-4XF2-7QFV-MGFX

Produtos afetados

Ipandlanguageredirect Extension For Typo3

Referências · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/ipandlanguageredirect/CVE-2023-35782.yaml · Exploit
• https://github.com/einpraegsam/ipandlanguageredirect/commit/d80eb99e739a09984ad0ea94b12380236346ae42 · Nota
• https://github.com/einpraegsam/ipandlanguageredirect · Nota
• https://osv.dev/vulnerability/CVE-2023-35782 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-35782 · Nota de Segurança
• https://typo3.org/security/advisory/typo3-ext-sa-2023-005 · Aviso do Fabricante
• https://t.me/cvenotify/52516 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-4xf2-7qfv-mgfx · Aviso do Fabricante