Lucene search

CVE-2023-30849 Pimcore vulnerable to SQL Injection in Translation Export API

🗓️ 27 Apr 2023 15:16:58Reported by GitHub_MType

Pimcore SQL Injection Vulnerability in Translation Export API prior to version 10.5.2

Reporter	Title	Published	Views	Family All 7
Veracode	SQL Injection	22 May 202305:06	–	veracode
OSV	CVE-2023-30849	27 Apr 202316:15	–	osv
OSV	SQL Injection in Translation Export API	27 Apr 202317:10	–	osv
Github Security Blog	SQL Injection in Translation Export API	27 Apr 202317:10	–	github
Prion	Sql injection	27 Apr 202316:15	–	prion
CVE	CVE-2023-30849	27 Apr 202316:15	–	cve
NVD	CVE-2023-30849	27 Apr 202316:15	–	nvd

[
  {
    "vendor": "pimcore",
    "product": "pimcore",
    "versions": [
      {
        "version": "< 10.5.21",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
github	www.github.com/pimcore/pimcore/pull/14968
github	www.github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Apr 2023 15:58Current

9.2High risk

Vulners AI Score9.2

CVSS38.8

EPSS0.002

CWE-89