Lucene search

K
osvGoogleOSV:GHSA-G8JX-66P8-VCM2
HistoryJul 13, 2021 - 5:42 p.m.

SQL injection in pimcore/pimcore

2021-07-1317:42:31
Google
osv.dev
9

0.001 Low

EPSS

Percentile

40.5%

This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.

0.001 Low

EPSS

Percentile

40.5%

Related for OSV:GHSA-G8JX-66P8-VCM2