PT-2023-25310 · Typo3 · Ipandlanguageredirect Extension For Typo3

Torben Hansen · Published 2023-06-16 · Updated 2023-06-26 · CVE-2023-35782

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AC:L/AV:N/A:N/C:H/I:L/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions ipandlanguageredirect extension for TYPO3 versions prior to 5.1.2

Description The issue allows SQL Injection.

Recommendations For versions prior to 5.1.2, update to version 5.1.2 or later to resolve the issue.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2023-35782

GHSA-4XF2-7QFV-MGFX

Affected Products

Ipandlanguageredirect Extension For Typo3

References · 8

• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/ipandlanguageredirect/CVE-2023-35782.yaml · Exploit
• https://osv.dev/vulnerability/CVE-2023-35782 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35782 · Security Note
• https://typo3.org/security/advisory/typo3-ext-sa-2023-005 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-4xf2-7qfv-mgfx · Vendor Advisory
• https://github.com/einpraegsam/ipandlanguageredirect/commit/d80eb99e739a09984ad0ea94b12380236346ae42 · Note
• https://github.com/einpraegsam/ipandlanguageredirect · Note
• https://t.me/cvenotify/52516 · Telegram Post