CVE Intelligence

TYPO3 Extension "Address List" vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting TYPO3 Extension "Address List": 1 record(s), with affected versions and fixes.

CVE-2026-8827 High · 8.2 CWE-89 May 19, 2026
SQL Injection in extension "Address List" (tt_address)
The AddressRepository::getSqlQuery() method constructs a database query without properly sanitizing user input, leading to SQL Injection. The method is not invoked anywhere within the extension itself and therefore poses no direct risk in a default installation. However, custom extensions that call this method with untrusted input would expose the site to SQL injection.