Skip to content
OpenAdvisories
Critical · 9.8 CVE-2017-1000009 EUVD-2022-4921GHSA-q8cr-xphm-7gfv

Akeneo PIM vulnerable to shell injection in the mass edition

Published Jul 13, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Package: akeneo/pim-community-dev Ecosystem: Packagist

Description

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist akeneo/pim-community-dev >= 1.4, < 1.4.28 1.4.28 GHSA-q8cr-xphm-7gfv
Packagist akeneo/pim-community-dev >= 1.5, < 1.5.15 1.5.15 GHSA-q8cr-xphm-7gfv
Packagist akeneo/pim-community-dev >= 1.6, < 1.6.6 1.6.6 GHSA-q8cr-xphm-7gfv

References