Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()

🗓️ 15 Nov 2023 14:53:24Reported by GitHub Advisory DatabaseType

Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt(). User input passed directly into an SQL statement allows non-admin backend users to execute arbitrary SQL statements. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-47637	15 Nov 202308:17	–	circl
CNNVD	Pimcore SQL Injection Vulnerability	15 Nov 202300:00	–	cnnvd
CVE	CVE-2023-47637	15 Nov 202319:13	–	cve
Cvelist	CVE-2023-47637 SQL Injection in Admin Grid Filter API in Pimcore	15 Nov 202319:13	–	cvelist
NVD	CVE-2023-47637	15 Nov 202320:15	–	nvd
OSV	CVE-2023-47637 SQL Injection in Admin Grid Filter API in Pimcore	15 Nov 202319:13	–	osv
OSV	GHSA-72HH-XF79-429P Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()	15 Nov 202314:53	–	osv
Prion	Design/Logic Flaw	15 Nov 202320:15	–	prion
Positive Technologies	PT-2023-30527 · Pimcore · Pimcore	15 Nov 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-47637	23 May 202501:58	–	redhatcve

Vulners

Node

pimcore pimcoreRange<11.1.1composer

Source	Link
github	www.github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p
github	www.github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0
github	www.github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php
github	www.github.com/pimcore/pimcore/blob/42b6cfa77c4540205bdd10689893ccb73e4bac8f/models/DataObject/ClassDefinition/Data/Multiselect.php
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-47637
github	www.github.com/advisories/GHSA-72hh-xf79-429p

15 Nov 2023 23:23Current

8.3High risk

Vulners AI Score8.3

CVSS 3.18.8

EPSS0.7572

SSVC

CWE-89