{"action":"Upgrade georgringer/news to 1.3.3 or later.","affected":[{"fixed":"1.3.3","introduced":"0"}],"component":"georgringer/news","cve_ids":["CVE-2013-4748"],"ecosystem":"Packagist","epss":0.01223,"exploited":false,"fixed_versions":["1.3.3"],"ghsa_id":"GHSA-rg6g-v4xm-g49q","id":"tcs_01M5KF87V8TA6MJ5BH52A46B6N","modified_at":"2025-04-12T04:12:08.469754Z","published_at":"2022-05-17T01:33:01Z","references":["https://osv.dev/vulnerability/GHSA-rg6g-v4xm-g49q","https://nvd.nist.gov/vuln/detail/CVE-2013-4748","https://exchange.xforce.ibmcloud.com/vulnerabilities/81192","https://github.com/georgringer/news","https://web.archive.org/web/20130214093535/http://typo3.org/teams/security/security-bulletins/typo3-extensions/typo3-ext-sa-2013-001","http://typo3.org/extensions/repository/view/news"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-rg6g-v4xm-g49q","url":"https://osv.dev/vulnerability/GHSA-rg6g-v4xm-g49q"}],"summary":"News system (news) extension for TYPO3 vulnerable to SQL Injection"}