Lucene search

SQL Injection in Translation Export API

🗓️ 27 Apr 2023 17:49:10Reported by GoogleType

osv🔗 osv.dev👁 13 Views

SQL Injection in Translation Export API. Vulnerability in SQL statement via "filter" GET parameter

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2023-30849 Pimcore vulnerable to SQL Injection in Translation Export API	27 Apr 202315:58	–	cvelist
Veracode	SQL Injection	22 May 202305:06	–	veracode
OSV	CVE-2023-30849	27 Apr 202316:15	–	osv
Github Security Blog	SQL Injection in Translation Export API	27 Apr 202317:10	–	github
Prion	Sql injection	27 Apr 202316:15	–	prion
NVD	CVE-2023-30849	27 Apr 202316:15	–	nvd
CVE	CVE-2023-30849	27 Apr 202316:15	–	cve

Source	Link
github	www.github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-30849
github	www.github.com/pimcore/pimcore/pull/14968
github	www.github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1
github	www.github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
github	www.github.com/pimcore/pimcore

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Apr 2023 17:10Current

7.6High risk

Vulners AI Score7.6

CVSS38.8

EPSS0.002