A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35628.json",
"cna_assigner": "mitre",
"unresolved_ranges": [
{
"extracted_events": [
{
"fixed": "17.6.1"
},
{
"introduced": "18.x"
},
{
"fixed": "24.x"
},
{
"fixed": "24.0.2"
}
],
"source": "DESCRIPTION"
}
]
}{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "17.6.1"
},
{
"introduced": "18.0.0"
},
{
"fixed": "24.0.2"
}
],
"source": "CPE_RANGE",
"cpe": "cpe:2.3:a:in2code:living_user_experience:*:*:*:*:*:typo3:*:*"
}