url_redirect for Typo3 SQLi Vulnerability

HOCH 7.3CVE-2019-16682 · GHSA-hcpv-xh8q-f3vq · Published 16/10/2019 · updated 17/06/2026

Kurz gesagt

CVE-2019-16682 ist eine Schwachstelle (HOCH (CVSS 7.3)) in sfroemken/url_redirect, url redirect (url redirect project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.82%, höher als bei 57.4% aller Schwachstellen.
Abhilfe: auf 1.2.2 oder neuer aktualisieren.

Package	Affected versions	Patched versions
sfroemken/url_redirect Packagist	`< 1.2.2`	`1.2.2`
url redirect url_redirect_project	`≤ 1.2.1`	No fix yet

The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection.

NVD description

The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.