Packagist/typo3/cms-core CVE-2013-1842: high 7.4, EPSS 3.12%
TYPO3 SQL injection vulnerability in the Extbase Framework
Action: Upgrade typo3/cms-core to 4.5.24 or later.
composer require typo3/cms-core:4.5.24composer require typo3/cms-core:4.6.17composer require typo3/cms-core:4.7.9composer require typo3/cms-core:6.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.5.0 | 4.5.24 | - |
| 4.6.0 | 4.6.17 | - |
| 4.7.0 | 4.7.9 | - |
| 6.0.0 | 6.0.3 | - |
Fixed versions
| 4.5.24 | 4.6.17 | 4.7.9 | 6.0.3 |
Sources
- osv: GHSA-m64j-j252-jxmr
- https://nvd.nist.gov/vuln/detail/CVE-2013-1842
- https://github.com/TYPO3-CMS/core
- http://lists.opensuse.org/opensuse-updates/2013-03/msg00079.html
- http://osvdb.org/90925
- http://secunia.com/advisories/52433
- http://secunia.com/advisories/52638
- http://typo3.org/support/teamssecuritysecurity-bulletins/security-bulletins-single-view/article/sql-injection-and-open-redirection-in-typo3-core
- http://www.debian.org/security/2013/dsa-2646
- http://www.openwall.com/lists/oss-security/2013/03/12/3
- http://www.securityfocus.com/bid/58330
CVE-2013-1842 · published · modified · JSON