Skip to content
OpenAdvisories
High · 7.2 CVE-2022-1429 EUVD-2022-1599GHSA-2v7p-f4qm-r5pc

SQL injection in GridHelperService.php in pimcore/pimcore

Published Apr 22, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: pimcore Product: pimcore/pimcore Package: pimcore/pimcore Ecosystem: Packagist

Description

SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data

Affected products

VendorProductAffectedFixed
pimcore pimcore/pimcore unspecified – < 10.3.6 10.3.6

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/pimcore < 10.3.6 10.3.6 GHSA-2v7p-f4qm-r5pc

References