High, CVSS 8.2PackagistPublished
ipandlanguageredirect extension vulnerable to SQL Injection
CVE-2023-35782 · GHSA-4xf2-7qfv-mgfx
- Affected
- Packagist in2code/ipandlanguageredirect < 5.1.2
- Fixed in
- 5.1.2· Vendor fix available
- Issue
- The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.
Recommended action: Upgrade to 5.1.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.