Description
Pimcore is an open source data & experience management platform. Prior to version 10.1.1, Data Object CSV import allows formular injection. The problem is patched in 10.1.1. Aside from upgrading, one may apply the patch manually as a workaround.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pimcore | pimcore | < 10.1.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.1.1 | 10.1.1 | GHSA-pp2h-95hm-hv9r |