Search for packages
Package details: pkg:composer/typo3/cms-core@4.5.23
purl pkg:composer/typo3/cms-core@4.5.23
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-zecr-kwwq-z3av
Aliases:
CVE-2013-1842
GHSA-m64j-j252-jxmr
TYPO3 SQL injection vulnerability in the Extbase Framework SQL injection vulnerability in the Extbase Framework in TYPO3 4.5.x before 4.5.24, 4.6.x before 4.6.17, 4.7.x before 4.7.9, and 6.0.x before 6.0.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, related to "the Query Object Model and relation values."
4.5.24
Affected by 0 other vulnerabilities.
4.6.17
Affected by 0 other vulnerabilities.
4.7.9
Affected by 0 other vulnerabilities.
6.0.3
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-07-05T18:42:28.405331+00:00 GHSA Importer Affected by VCID-zecr-kwwq-z3av https://github.com/advisories/GHSA-m64j-j252-jxmr 37.0.0
2025-07-01T18:13:48.213149+00:00 GitLab Importer Affected by VCID-zecr-kwwq-z3av https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/typo3/cms-core/CVE-2013-1842.yml 36.1.3