Lucene search

SQL Injection in Translation Export API

🗓️ 27 Apr 2023 17:49:10Reported by GitHub Advisory DatabaseType

SQL Injection in Translation Export API. Vulnerable to SQL injection via "filter" parameter

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2023-30849 Pimcore vulnerable to SQL Injection in Translation Export API	27 Apr 202315:58	–	cvelist
Veracode	SQL Injection	22 May 202305:06	–	veracode
OSV	CVE-2023-30849	27 Apr 202316:15	–	osv
OSV	SQL Injection in Translation Export API	27 Apr 202317:10	–	osv
Prion	Sql injection	27 Apr 202316:15	–	prion
NVD	CVE-2023-30849	27 Apr 202316:15	–	nvd
CVE	CVE-2023-30849	27 Apr 202316:15	–	cve

Vulners

Node

pimcore pimcoreRange<10.5.21

Source	Link
github	www.github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56
github	www.github.com/pimcore/pimcore/pull/14968
github	www.github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30849
github	www.github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
github	www.github.com/advisories/GHSA-xmg8-w465-mr56

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Apr 2023 17:10Current

7.6High risk

Vulners AI Score7.6

EPSS0.002

CWE-89