2 matches found
CVE-2021-23405
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class...
8.8CVSS0.01715EPSS
SaveExploits1References2
CVE-2021-23405: Improper Neutralization of Special Elements used in an SQL Command
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class...
8.8CVSS5.8AI score0.01715EPSS
SaveExploits1References2
20