GHSA-g8jx-66p8-vcm2
SQL injection in pimcore/pimcore
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.0.7 | 10.0.7 |
Details
As written in the advisory (Markdown source, shown as plain text).
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.
References
External links from the advisory. They lead to third-party sites.