CVE-2026-62998
1 advisory.
Packagist/redaxo/source CVE-2026-62998: medium 4.3, EPSS 0.24%
REDAXO: Unwhitelisted ORDER BY Column in rex_list Allows Authenticated Column Enumeration
Action: Upgrade redaxo/source to 5.21.2 or later.
composer require redaxo/source:5.21.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.21.2 | - |
Fixed versions
| 5.21.2 |
Sources
- osv: GHSA-4f5f-j737-pm58
- https://github.com/redaxo/core/security/advisories/GHSA-4f5f-j737-pm58
- https://nvd.nist.gov/vuln/detail/CVE-2026-62998
- https://github.com/redaxo/core/pull/6580
- https://github.com/redaxo/core/commit/c44ba5206a28427984100c994010f2aaa6703efd
- https://github.com/redaxo/core
- https://github.com/redaxo/core/releases/tag/5.21.2
CVE-2026-62998 · published · modified · JSON