{"action":"Upgrade in2code/lux to 17.6.1 or later.","affected":[{"fixed":"24.0.2","introduced":"18.0.0"},{"fixed":"17.6.1","introduced":"0"}],"component":"in2code/lux","cve_ids":["CVE-2022-35628"],"ecosystem":"Packagist","epss":0.26821,"exploited":false,"fixed_versions":["24.0.2","17.6.1"],"ghsa_id":"GHSA-rpxg-hg79-h8q9","id":"tcs_01M5KF8FDMX9F47DKX8QA0BT3D","modified_at":"2023-11-08T04:09:51.512093Z","published_at":"2022-07-15T15:28:26Z","references":["https://osv.dev/vulnerability/GHSA-rpxg-hg79-h8q9","https://nvd.nist.gov/vuln/detail/CVE-2022-35628","https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/lux/CVE-2022-35628.yaml","https://typo3.org/security/advisory/typo3-ext-sa-2022-014"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rpxg-hg79-h8q9","url":"https://osv.dev/vulnerability/GHSA-rpxg-hg79-h8q9"}],"summary":"SQL Injection in typo3 extension \"LUX - TYPO3 Marketing Automation\""}