CVE-2022-35628: SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"

July 15, 2022

A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.

References

github.com/FriendsOfPHP/security-advisories/blob/master/in2code/lux/CVE-2022-35628.yaml
github.com/advisories/GHSA-rpxg-hg79-h8q9
nvd.nist.gov/vuln/detail/CVE-2022-35628
typo3.org/security/advisory/typo3-ext-sa-2022-014

Code Behaviors & Features

Detect and mitigate CVE-2022-35628 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →