TYPO3 SQL Injection in extension "Address List" (tt_address)
The advisory, in context
In the TYPO3 extension tt_address, the AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within the extension itself and therefore poses no direct risk in a default installation. However, custom extensions that call this method with untrusted input would expose the site to SQL injection. This has been patched in version 8.1.2, 9.1.1, and 10.0.1.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
From 10.0.0 before 10.0.1
Fixed in 10.0.1
1 explicitly affected versions
10.0.0
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "10.0.0"
},
{
"fixed": "10.0.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0"
]
}From 9.0.0 before 9.1.1
Fixed in 9.1.1
3 explicitly affected versions
9.0.0, 9.0.1, 9.1.0
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "9.0.0"
},
{
"fixed": "9.1.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"9.0.0",
"9.0.1",
"9.1.0"
]
}Earlier releases before 8.1.2
Fixed in 8.1.2
34 explicitly affected versions
3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.1.0, 3.1.1, 3.2.0, 3.2.1, 4.0.0, 4.0.1, 4.1.0, 4.2.0, 4.3.0, 5.0.0, 5.1.0, 5.1.1, 5.1.2, 5.2.0, 5.2.1, 5.3.0, 6.0.0, 6.0.1, 6.1.0, 7.0.0, 7.1.0, 8.0.0, 8.0.1, 8.0.2, 8.0.3, 8.1.0, 8.1.1, v3.2.2, v3.2.3, v3.2.4
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.1.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"3.0.0",
"3.0.1",
"3.0.2",
"3.0.3",
"3.1.0",
"3.1.1",
"3.2.0",
"3.2.1",
"4.0.0",
"4.0.1",
"4.1.0",
"4.2.0",
"4.3.0",
"5.0.0",
"5.1.0",
"5.1.1",
"5.1.2",
"5.2.0",
"5.2.1",
"5.3.0",
"6.0.0",
"6.0.1",
"6.1.0",
"7.0.0",
"7.1.0",
"8.0.0",
"8.0.1",
"8.0.2",
"8.0.3",
"8.1.0",
"8.1.1",
"v3.2.2",
"v3.2.3",
"v3.2.4"
]
}