high7.2
CVE-2019-19850
TYPO3 SQL Injection in low-level Query Generator
Impact
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension ext:lowlevel installed, and a valid backend user who has administrator privileges.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | typo3/cms | >= 8.0, < 8.7.30 | 8.7.30 |
| composer | typo3/cms-core | >= 8.0, < 8.7.30 | 8.7.30 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Typo3 | Typo3 | from 8.0.0 before 8.7.30 from 9.0.0 before 9.5.12 from 10.0.0 before 10.2.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://review.typo3.org/q/%2522Resolves:+%252389452%2522+topic:security
- https://typo3.org/security/advisory/typo3-core-sa-2019-025/
- https://github.com/advisories/GHSA-59pj-7mjh-4465
- https://nvd.nist.gov/vuln/detail/CVE-2019-19850
- https://typo3.org/security/advisory/typo3-core-sa-2019-025