Description
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerability. Users should upgrade to version 10.5.21 to receive a patch or, as a workaround, apply the patch manually.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pimcore | pimcore | < 10.5.21 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.5.21 | 10.5.21 | GHSA-6mhm-gcpf-5gr8 |