Skip to content
OpenAdvisories
High · 8.8 CVE-2023-30849 EUVD-2023-1429GHSA-xmg8-w465-mr56

Pimcore vulnerable to SQL Injection in Translation Export API

Published Apr 27, 2023 · Updated Jan 31, 2025 · Assigned by GitHub_M

Description

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.

Affected products

VendorProductAffectedFixed
pimcore pimcore < 10.5.21 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/pimcore < 10.5.21 10.5.21 GHSA-xmg8-w465-mr56

References