SQL injection in vhs (aka VHS: Fluid ViewHelpers) · CVE-2021-28381 · GitHub Advisory Database · GitHub

SQL injection in vhs (aka VHS: Fluid ViewHelpers)

Critical severity GitHub Reviewed Published Mar 29, 2021 to the GitHub Advisory Database • Updated Feb 1, 2023

Package

fluidtypo3/vhs (Composer)

Affected versions

< 5.1.1

Patched versions

5.1.1

Description

The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper.

References

Published by the National Vulnerability Database

Mar 16, 2021

Reviewed Mar 23, 2021

Published to the GitHub Advisory Database Mar 29, 2021

Last updated Feb 1, 2023