medium6.4
CVE-2021-31779
Server-Side Request Forgery in yoast_seo
Impact
The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | yoast-seo-for-typo3/yoast_seo | < 7.2.1 | 7.2.1 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yoast | Yoast Seo | before 7.2.1 |