MEDIUM6.4
GHSA-m2q4-qghh-p9cq
Server-Side Request Forgery in yoast_seo
Quick fix
GHSA-m2q4-qghh-p9cq — yoast-seo-for-typo3/yoast_seo: upgrade to the fixed version with the command below.
composer require yoast-seo-for-typo3/yoast_seo:^7.2.1Details
The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/yoast-seo-for-typo3/yoast_seo
Introduced in:
0Fixed in: 7.2.1Fix
composer require yoast-seo-for-typo3/yoast_seo:^7.2.1