Description
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin translations API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pimcore | pimcore | < 10.5.21 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.5.21 | 10.5.21 | GHSA-jwg4-qcgv-5wg6 |