Description
The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | yoast-seo-for-typo3/yoast_seo | < 7.2.1 | 7.2.1 | GHSA-m2q4-qghh-p9cq |
Medium · 6.4
CVE-2021-31779
EUVD-2021-1130GHSA-m2q4-qghh-p9cq
Server-Side Request Forgery in yoast_seo
Published Apr 28, 2021 · Updated Aug 3, 2024 · Assigned by mitre