nvd-json-data-feeds/CVE-2024/CVE-2024-221xx/CVE-2024-22188.json

{
  "id": "CVE-2024-22188",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2024-03-05T02:15:27.443",
  "lastModified": "2024-03-05T13:41:01.900",
  "vulnStatus": "Awaiting Analysis",
  "descriptions": [
    {
      "lang": "en",
      "value": "TYPO3 before 13.0.1 allows an authenticated admin user (with system maintainer privileges) to execute arbitrary shell commands (with the privileges of the web server) via a command injection vulnerability in form fields of the Install Tool. The fixed versions are 8.7.57 ELTS, 9.5.46 ELTS, 10.4.43 ELTS, 11.5.35 LTS, 12.4.11 LTS, and 13.0.1."
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://github.com/TYPO3/typo3/security/advisories/GHSA-5w2h-59j3-8x5w",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://typo3.org/help/security-advisories",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://typo3.org/security/advisory/typo3-core-sa-2024-002",
      "source": "cve@mitre.org"
    }
  ]
}