Critical · 9.8 CVE-2022-35628 EUVD-2022-6412GHSA-rpxg-hg79-h8q9

SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"

Published Jul 12, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

Ecosystem	Package	Affected	Fixed	Record
Packagist	in2code/lux	>= 18.0.0, < 24.0.2	24.0.2	GHSA-rpxg-hg79-h8q9
Packagist	in2code/lux	< 17.6.1	17.6.1	GHSA-rpxg-hg79-h8q9