Description (CNA)
The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation. Only the filter conditions of that query were bound as parameters. A backend user with access to the history or statistics functions could use this to read arbitrary data from the database, including password hashes of backend and frontend users.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| TYPO3 / Extension "sgalinski Cookie Consent" | affected 8.0.0 before 8.1.12; affected 0 before 7.4.6 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.
No references supplied.