~ / search / GHSA-mj2c-5mjv-gmmj

GHSA-mj2c-5mjv-gmmj

SQL Injection in Pimcore

Source: GitHub Advisory Database (reviewed) High CVE-2022-1339

Packages

EcosystemPackageAffectedFixed in
Packagist pimcore/pimcore < 10.3.5 10.3.5

Details

As written in the advisory (Markdown source, shown as plain text).

Pimcore prior to version 10.3.5 is vulnerable to SQL injection in ElementController.php. This vulnerability causes loss of data confidentiality.

References

External links from the advisory. They lead to third-party sites.