{"id":"GHSA-4xf2-7qfv-mgfx","aliases":["CVE-2023-35782"],"title":"ipandlanguageredirect extension vulnerable to SQL Injection","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"HIGH","description":"The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.","severity":"high","score":8.2,"published":"2023-06-16T15:30:19.000Z","modified":"2024-02-16T08:20:27.106Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"in2code/ipandlanguageredirect","sources":[{"name":"OSV · GHSA-4xf2-7qfv-mgfx","url":"https://osv.dev/vulnerability/GHSA-4xf2-7qfv-mgfx"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"5.1.2"}],"type":"ECOSYSTEM"}],"versions":["1.0.0","1.1.0","1.2.0","1.3.0","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.6.0","1.6.1","1.6.2","1.6.3","1.6.4","1.7.0","1.7.1","1.7.2","1.8.0","2.0.0","2.1.0","2.2.0","3.0.0","3.0.1","3.1.0","4.0.0","4.0.1","5.0.0","5.1.0","5.1.1"],"fixed":["5.1.2"]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2023-35782","https://github.com/einpraegsam/ipandlanguageredirect/commit/d80eb99e739a09984ad0ea94b12380236346ae42","https://github.com/FriendsOfPHP/security-advisories/blob/master/in2code/ipandlanguageredirect/CVE-2023-35782.yaml","https://github.com/einpraegsam/ipandlanguageredirect","https://typo3.org/security/advisory/typo3-ext-sa-2023-005"],"sources":[{"name":"OSV","id":"GHSA-4xf2-7qfv-mgfx","modified":"2024-02-16T08:20:27.106951Z","url":"https://osv.dev/vulnerability/GHSA-4xf2-7qfv-mgfx"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N","score":8.2}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T10:45:31.624Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}