Packagist/typo3/cms-core: high 7.5
TYPO3 CMS Privilege Escalation and SQL Injection
Action: Upgrade typo3/cms-core to 8.7.17 or later.
composer require typo3/cms-core:8.7.17composer require typo3/cms-core:9.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.5.0 | 8.7.17 | - |
| 9.0.0 | 9.3.2 | - |
Fixed versions
| 8.7.17 | 9.3.2 |
Sources
- osv: GHSA-45wj-jv2h-jwrf
- https://github.com/TYPO3-CMS/core/commit/5e3ed52854ea8192f1c0e2ef30f434e74ba6d253
- https://github.com/TYPO3-CMS/core/commit/a0a6271dc8f715b5b6859771333d57925dfb63bc
- https://github.com/TYPO3-CMS/core/commit/e70d7c66110a0919b39bccdfdc73cbfd7f504dfc
- https://github.com/TYPO3-CMS/core/commit/eddc7635fb3447f0fb69831855f4095de8e12350
- https://github.com/FriendsOfPHP/security-advisories/blob/master/typo3/cms-core/2018-07-12-3.yaml
- https://github.com/TYPO3-CMS/core
- https://typo3.org/security/advisory/typo3-core-sa-2018-003
published · modified · JSON