Lucene search
+L

3 matches found

osv_ghsa
osv_ghsa
•added 2026/09/10 7:25 p.m.•29 views

GHSA-23RH-XW42-FQ82 Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

8.8CVSS6.2AI score0.0065EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/09/10 7:25 p.m.•27 views

Pimcore: SQL Injection in Custom Reports via Malicious Report Configuration

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reportsconfig permission can inject...

8.8CVSS6.2AI score0.0065EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/10 12:00 a.m.•30 views

PT-2026-89734

Security Advisory: SQL Injection in Custom Reports via Malicious Report Configuration Summary Impact A SQL injection vulnerability exists in the Custom Reports bundle bundles/CustomReportsBundle/src/Tool/Adapter/Sql.php:84-135. An authenticated attacker with reports config permission can inject...

8.8CVSS6.2AI score0.0065EPSS
SaveExploits0References9
Rows per page
Query Builder