SQL Injection Affecting oliverklee/oelib package, versions <4.1.6
Threat Intelligence
Exploit Maturity
Mature
EPSS
0.18% (56th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-OLIVERKLEEOELIB-2949170
- published 13 Jul 2022
- disclosed 13 Jul 2022
- credit Oliver Klee
Introduced: 13 Jul 2022
CVE-2022-29600 Open this link in a new tabHow to fix?
Upgrade oliverklee/oelib to version 4.1.6 or higher.
Overview
oliverklee/oelib is an Useful stuff for TYPO3 extension development: helper functions for unit testing, templating and automatic configuration checks.
Affected versions of this package are vulnerable to SQL Injection due to improper user input sanitization.
References
CVSS Scores
version 3.1