MediumGHSA-59pj-7mjh-4465CVE-2019-19850
TYPO3 SQL Injection in low-level Query Generator
Published 24 May 2022 · Updated 8 Dec 2024
Affected packages
typo3/cmsComposer
- Affected
- >=8.0 <8.7.30
- Fixed in
- 8.7.30
Update to the fixed version for your release line, for example:
composer require typo3/cms:^8.7.30typo3/cmsComposer
- Affected
- >=9.0 <9.5.12
- Fixed in
- 9.5.12
Update to the fixed version for your release line, for example:
composer require typo3/cms:^9.5.12typo3/cmsComposer
- Affected
- >=10.0 <10.2.2
- Fixed in
- 10.2.2
Update to the fixed version for your release line, for example:
composer require typo3/cms:^10.2.2typo3/cms-coreComposer
- Affected
- >=8.0 <8.7.30
- Fixed in
- 8.7.30
Update to the fixed version for your release line, for example:
composer require typo3/cms-core:^8.7.30typo3/cms-coreComposer
- Affected
- >=9.0 <9.5.12
- Fixed in
- 9.5.12
Update to the fixed version for your release line, for example:
composer require typo3/cms-core:^9.5.12typo3/cms-coreComposer
- Affected
- >=10.0 <10.2.2
- Fixed in
- 10.2.2
Update to the fixed version for your release line, for example:
composer require typo3/cms-core:^10.2.2Details
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension ext:lowlevel installed, and a valid backend user who has administrator privileges.
Is GHSA-59pj-7mjh-4465 in any of your client repos?
Checking one package by hand is fine. Checking it across forty client projects is not. NPMscan reads the lockfiles in every GitHub repo you pick, finds each project with an affected typo3/cms, and gives you the command that fixes it.
References
Advisory data from OSV.dev (opens OSV.dev in a new tab), refreshed daily.