CVE-2021-31869 Pimcore AdminBundle 'specificID' SQL Injection

Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product...

CVE-2021-31869

PVE: CVE-2021-31869 concerns Pimcore AdminBundle (v6.8.0 and earlier). Root cause: SQL injection in the specificID parameter used by admin data listing logic (grid-proxy/prepareListingForGrid) that concatenates user-supplied input into SQL. Impact: potential database-level manipulation or data ex...