ipandlanguageredirect extension vulnerable to SQL Injection

严重 9.8CVE-2023-35782 · GHSA-4xf2-7qfv-mgfx · Published 16/06/2023 · updated 17/06/2026

要点

CVE-2023-35782 是影响 in2code/ipandlanguageredirect, ipandlanguageredirect (ipandlanguageredirect project) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：0.51%，高于 43.7% 的漏洞。
修复：升级到 5.1.2 或更高版本。

Package	Affected versions	Patched versions
in2code/ipandlanguageredirect Packagist	`< 5.1.2`	`5.1.2`
ipandlanguageredirect ipandlanguageredirect_project	`< 5.1.2`	`5.1.2`

The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.

NVD description

The ipandlanguageredirect extension before 5.1.2 for TYPO3 allows SQL Injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.