{"id":"GHSA-4xf2-7qfv-mgfx","summary":"ipandlanguageredirect extension vulnerable to SQL Injection","details":"The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.","aliases":["CVE-2023-35782"],"modified":"2024-02-16T08:20:27.106951Z","published":"2023-06-16T15:30:19Z","database_specific":{"cwe_ids":["CWE-89"],"severity":"HIGH","github_reviewed":true,"github_reviewed_at":"2023-06-16T22:14:34Z","nvd_published_at":"2023-06-16T15:15:09Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35782"},{"type":"WEB","url":"https://github.com/einpraegsam/ipandlanguageredirect/commit/d80eb99e739a09984ad0ea94b12380236346ae42"},{"type":"WEB","url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/ipandlanguageredirect/CVE-2023-35782.yaml"},{"type":"PACKAGE","url":"https://github.com/einpraegsam/ipandlanguageredirect"},{"type":"WEB","url":"https://typo3.org/security/advisory/typo3-ext-sa-2023-005"}],"affected":[{"package":{"name":"in2code/ipandlanguageredirect","ecosystem":"Packagist","purl":"pkg:composer/in2code/ipandlanguageredirect"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.2"}]}],"versions":["1.0.0","1.1.0","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.7.0","1.7.1","1.7.2","1.8.0","2.0.0","2.1.0","2.2.0","3.0.0","3.0.1","3.1.0","4.0.0","4.0.1","5.0.0","5.1.0","5.1.1"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/06/GHSA-4xf2-7qfv-mgfx/GHSA-4xf2-7qfv-mgfx.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"}]}