url_redirect for Typo3 SQLi Vulnerability

ÉLEVÉE 7.3CVE-2019-16682 · GHSA-hcpv-xh8q-f3vq · Published 16/10/2019 · updated 17/06/2026

En bref

CVE-2019-16682 est une vulnérabilité ÉLEVÉE (CVSS 7.3) touchant sfroemken/url_redirect, url redirect (url redirect project).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.82%, plus élevée que 57.4% des vulnérabilités.
Correctif : mettre à jour vers 1.2.2 ou plus récent.

Package	Affected versions	Patched versions
sfroemken/url_redirect Packagist	`< 1.2.2`	`1.2.2`
url redirect url_redirect_project	`≤ 1.2.1`	No fix yet

The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection.

NVD description

The url_redirect (aka URL redirect) extension through 1.2.1 for TYPO3 fails to properly sanitize user input and is susceptible to SQL Injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.