SQL Injection in typo3 extension "LUX - TYPO3 Marketing Automation"
The advisory, in context
A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.
Affected packages
Start with the recorded fix for your release branch. Check your installed version and test compatibility before upgrading. Fixing this advisory does not rule out other vulnerabilities in the release.
From 18.0.0 before 24.0.2
Fixed in 24.0.2
35 explicitly affected versions
18.0.0, 18.1.0, 18.1.1, 19.0.0, 19.0.1, 19.0.2, 19.0.3, 20.0.0, 20.0.1, 20.1.0, 20.2.0, 20.2.1, 20.2.2, 21.0.0, 21.1.0, 21.2.0, 21.3.0, 21.4.0, 22.0.0, 22.1.0, 22.2.0, 22.3.0, 22.3.1, 22.3.2, 22.3.3, 22.4.0, 22.5.0, 22.6.0, 23.0.0, 23.1.0, 23.2.0, 23.2.1, 23.3.0, 24.0.0, 24.0.1
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "18.0.0"
},
{
"fixed": "24.0.2"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"18.0.0",
"18.1.0",
"18.1.1",
"19.0.0",
"19.0.1",
"19.0.2",
"19.0.3",
"20.0.0",
"20.0.1",
"20.1.0",
"20.2.0",
"20.2.1",
"20.2.2",
"21.0.0",
"21.1.0",
"21.2.0",
"21.3.0",
"21.4.0",
"22.0.0",
"22.1.0",
"22.2.0",
"22.3.0",
"22.3.1",
"22.3.2",
"22.3.3",
"22.4.0",
"22.5.0",
"22.6.0",
"23.0.0",
"23.1.0",
"23.2.0",
"23.2.1",
"23.3.0",
"24.0.0",
"24.0.1"
]
}Earlier releases before 17.6.1
Fixed in 17.6.1
112 explicitly affected versions
10.0.0, 10.0.1, 10.0.2, 10.1.0, 10.2.0, 10.3.0, 10.3.1, 10.3.2, 10.3.3, 11.0.0, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.3.1, 11.3.2, 11.4.0, 11.5.0, 11.6.0, 11.7.0, 11.7.1, 11.8.0, 12.0.0, 13.0.0, 13.1.0, 13.2.0, 13.3.0, 13.4.0, 13.4.1, 13.4.2, 14.0.0, 14.0.1, 14.0.2, 14.0.3, 14.1.0, 14.2.0, 14.3.0, 14.3.1, 14.3.2, 14.4.0, 14.4.1, 14.4.2, 15.0.0, 15.0.1, 15.0.2, 15.0.3, 15.1.0, 15.2.0, 15.2.1, 15.2.2, 15.3.0, 15.3.1, 16.0.0, 16.0.1, 16.0.2, 17.0.0, 17.0.1, 17.0.2, 17.1.0, 17.1.1, 17.1.2, 17.2.0, 17.2.1, 17.2.2, 17.2.3, 17.3.0, 17.4.0, 17.4.1, 17.5.0, 17.6.0, 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.4.0, 2.5.0, 3.0.0, 4.0.0, 4.1.0, 4.1.1, 4.1.2, 4.1.3, 5.0.0, 5.1.0, 6.0.0, 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.0.1, 7.0.2, 7.1.0, 7.2.0, 7.2.1, 7.2.2, 7.2.3, 7.3.0, 8.0.0, 8.0.1, 8.1.0, 8.1.1, 8.2.0, 8.2.1, 8.2.2, 9.0.0, 9.1.0, 9.1.1, 9.1.2
View affected-version evidence
{
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "17.6.1"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"10.0.0",
"10.0.1",
"10.0.2",
"10.1.0",
"10.2.0",
"10.3.0",
"10.3.1",
"10.3.2",
"10.3.3",
"11.0.0",
"11.1.0",
"11.2.0",
"11.2.1",
"11.3.0",
"11.3.1",
"11.3.2",
"11.4.0",
"11.5.0",
"11.6.0",
"11.7.0",
"11.7.1",
"11.8.0",
"12.0.0",
"13.0.0",
"13.1.0",
"13.2.0",
"13.3.0",
"13.4.0",
"13.4.1",
"13.4.2",
"14.0.0",
"14.0.1",
"14.0.2",
"14.0.3",
"14.1.0",
"14.2.0",
"14.3.0",
"14.3.1",
"14.3.2",
"14.4.0",
"14.4.1",
"14.4.2",
"15.0.0",
"15.0.1",
"15.0.2",
"15.0.3",
"15.1.0",
"15.2.0",
"15.2.1",
"15.2.2",
"15.3.0",
"15.3.1",
"16.0.0",
"16.0.1",
"16.0.2",
"17.0.0",
"17.0.1",
"17.0.2",
"17.1.0",
"17.1.1",
"17.1.2",
"17.2.0",
"17.2.1",
"17.2.2",
"17.2.3",
"17.3.0",
"17.4.0",
"17.4.1",
"17.5.0",
"17.6.0",
"2.0.0",
"2.0.1",
"2.0.2",
"2.0.3",
"2.1.0",
"2.2.0",
"2.3.0",
"2.3.1",
"2.4.0",
"2.5.0",
"3.0.0",
"4.0.0",
"4.1.0",
"4.1.1",
"4.1.2",
"4.1.3",
"5.0.0",
"5.1.0",
"6.0.0",
"6.1.0",
"6.2.0",
"6.3.0",
"7.0.0",
"7.0.1",
"7.0.2",
"7.1.0",
"7.2.0",
"7.2.1",
"7.2.2",
"7.2.3",
"7.3.0",
"8.0.0",
"8.0.1",
"8.1.0",
"8.1.1",
"8.2.0",
"8.2.1",
"8.2.2",
"9.0.0",
"9.1.0",
"9.1.1",
"9.1.2"
]
}