CVE-2023-30849

🗓️ 27 Apr 2023 16:11:15Reported by GitHub_MType

Pimcore open source platform SQL injection vulnerability pre-10.5.21

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2023-30849 Pimcore vulnerable to SQL Injection in Translation Export API	27 Apr 202315:58	–	cvelist
Veracode	SQL Injection	22 May 202305:06	–	veracode
OSV	CVE-2023-30849	27 Apr 202316:15	–	osv
OSV	SQL Injection in Translation Export API	27 Apr 202317:10	–	osv
Github Security Blog	SQL Injection in Translation Export API	27 Apr 202317:10	–	github
Prion	Sql injection	27 Apr 202316:15	–	prion
NVD	CVE-2023-30849	27 Apr 202316:15	–	nvd

Nvd

Vulners

Node

pimcore pimcoreRange<10.5.21

[
  {
    "vendor": "pimcore",
    "product": "pimcore",
    "versions": [
      {
        "version": "< 10.5.21",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
github	www.github.com/pimcore/pimcore/pull/14968
github	www.github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Apr 2023 16:15Current

8.9High risk

Vulners AI Score8.9

CVSS38.8

EPSS0.002

CWE-89