SQL injection in pimcore/pimcore

🗓️ 13 Jul 2021 17:31:42Reported by GitHub Advisory DatabaseType

SQL injection in pimcore/pimcore before 10.0.7, absence of parameter chec

Reporter	Title	Published	Views	Family All 7
NVD	CVE-2021-23405	9 Jul 202113:15	–	nvd
CNVD	pimcore SQL Injection Vulnerability (CNVD-2021-50182)	13 Jul 202100:00	–	cnvd
Prion	Design/Logic Flaw	9 Jul 202113:15	–	prion
Cvelist	CVE-2021-23405 SQL Injection	9 Jul 202112:40	–	cvelist
CVE	CVE-2021-23405	9 Jul 202113:15	–	cve
OSV	CVE-2021-23405	9 Jul 202113:15	–	osv
OSV	SQL injection in pimcore/pimcore	13 Jul 202117:42	–	osv

Vulners

Node

pimcore pimcoreRange<10.0.7

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-23405
github	www.github.com/pimcore/pimcore/pull/9572
snyk	www.snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1316297
github	www.github.com/advisories/GHSA-g8jx-66p8-vcm2

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Jul 2021 17:42Current

2.7Low risk

Vulners AI Score2.7

CVSS26.5

CVSS38.3 - 8.8

EPSS0.00023

CWE-89