Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-2756 EUVD-2023-1441GHSA-25fx-3c2q-cq46

SQL Injection in pimcore/customer-data-framework

Published May 17, 2023 · Updated Jan 22, 2025 · Assigned by @huntrdev

Vendor: pimcore Product: Pimcore Customer Data Framework Package: pimcore/customer-management-framework-bundle Ecosystem: Packagist

Description

SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

Affected products

VendorProductAffectedFixed
pimcore pimcore/customer-data-framework unspecified – < 3.3.10 3.3.10

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/customer-management-framework-bundle < 3.3.10 3.3.10 GHSA-25fx-3c2q-cq46

References