Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
In2code records in CISA KEVNo In2code vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 64
A SQL injection issue was discovered in the lux extension before 17.6.1, and 18.x through 24.x before 24.0.2, for TYPO3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.26821 · Published 2022-07-12 · Fixed in 24.0.2, 17.6.1 CWE-89
Open these records in search →