CVE-2026-112064
Received Received - Intake

SQL Injection in Consent History Backend Module

Publication date: 2026-10-20

Last updated on: 2026-10-20

Assigner: TYPO3

Description
The backend module for reviewing the consent history accepted sorting, grouping and index options from the request and used them in a database query without validation. Only the filter conditions of that query were bound as parameters. A backend user with access to the history or statistics functions could use this to read arbitrary data from the database, including password hashes of backend and frontend users.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-20
Last Modified
2026-10-20
Generated
2026-10-20
AI Q&A
2026-10-20
EPSS Evaluated
N/A
NVD
CVE-2026-112064
EUVD
EUVD-2026-104874

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
TYPO3 Extension "sgalinski Cookie Consent" 8.0.0
TYPO3 Extension "sgalinski Cookie Consent" 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability exists in the TYPO3 extension 'sgalinski Cookie Consent'. The backend module for reviewing consent history accepted sorting, grouping, and index options from user requests without validation. These inputs were directly used in database queries, allowing backend users to read arbitrary data, including password hashes of other users.

Detection Guidance

Check if the vulnerable extension versions (7.4.5 and below or 8.0.0 to 8.1.11) are installed by inspecting the TYPO3 backend or server files. Look for the 'sg_cookie_optin' extension directory and verify its version in the composer.json or ext_emconf.php file.

Impact Analysis

An attacker with backend access could exploit this to read sensitive data like password hashes of other users. They could also retrieve consent data from any site in the installation or inject malicious scripts into the frontend via the JSON import feature.

Compliance Impact

This vulnerability could lead to unauthorized access to personal data, violating GDPR's data protection principles. It may also compromise HIPAA compliance by exposing sensitive user information. Unauthorized data access risks legal penalties and reputational damage.

Mitigation Strategies

Update the 'sgalinski Cookie Consent' extension to versions 7.4.6 or 8.1.12 immediately. Remove or restrict access to the affected backend modules until the update is applied. Review and audit database access logs for unusual queries or data exfiltration attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112064. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart