PT-2022-22931
CVE-2022-35628
·
Published
2022-07-12
·
Updated
2022-07-27
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
lux extension versions prior to 17.6.1
lux extension versions 18.x through 24.x before 24.0.2
Description
A SQL injection issue was discovered in the lux extension for TYPO3.
Recommendations
For versions prior to 17.6.1, update to version 17.6.1 or later.
For versions 18.x through 24.x, update to version 24.0.2 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾