Skip to content
OpenAdvisories
High · 7.2 CVE-2022-1219 EUVD-2022-1648GHSA-6gm7-j668-w6h9

SQL injection in RecyclebinController.php in pimcore/pimcore

Published Apr 8, 2022 · Updated Aug 2, 2024 · Assigned by @huntrdev

Vendor: pimcore Product: pimcore/pimcore Package: pimcore/pimcore Ecosystem: Packagist

Description

SQL injection in RecyclebinController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

Affected products

VendorProductAffectedFixed
pimcore pimcore/pimcore unspecified – < 10.3.5 10.3.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/pimcore < 10.3.5 10.3.5 GHSA-6gm7-j668-w6h9

References