Skip to content
OpenAdvisories
High · 8.8 CVE-2022-1339 EUVD-2022-1785GHSA-mj2c-5mjv-gmmj

SQL injection in ElementController.php in pimcore/pimcore

Published Apr 13, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: pimcore Product: pimcore/pimcore Package: pimcore/pimcore Ecosystem: Packagist

Description

SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data

Affected products

VendorProductAffectedFixed
pimcore pimcore/pimcore unspecified – < 10.3.5 10.3.5

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/pimcore < 10.3.5 10.3.5 GHSA-mj2c-5mjv-gmmj

References