3 matches found
EUVD-2026-25909
Pimcore Platform - SQL Injection in DataObject composite index handling during class definition import/save...
7CVSS5.9AI score0.00346EPSS
SaveExploits0References7
CVE-2026-5394
An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended SQL execution in the backend. This issue affects pimcore: 12.3.3...
7CVSS0.00346EPSS
SaveExploits0References3
CVE-2026-5394
An authenticated administrative user who can import or save DataObject class definitions can inject attacker-controlled composite index metadata and trigger unintended SQL execution in the backend. This issue affects pimcore: 12.3.3...
7CVSS5.8AI score0.00346EPSS
SaveExploits0References3Affected Software1
20