Packagist/in2code/lux CVE-2022-35628: critical 9.8, EPSS 26.82%
SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
Action: Upgrade in2code/lux to 17.6.1 or later.
composer require in2code/lux:24.0.2composer require in2code/lux:17.6.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 18.0.0 | 24.0.2 | - |
| 0 | 17.6.1 | - |
Fixed versions
| 24.0.2 | 17.6.1 |
Sources
- osv: GHSA-rpxg-hg79-h8q9
- https://nvd.nist.gov/vuln/detail/CVE-2022-35628
- https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/lux/CVE-2022-35628.yaml
- https://typo3.org/security/advisory/typo3-ext-sa-2022-014
CVE-2022-35628 · published · modified · JSON