CVE-2018-14058

Pimcore before 5.3.0 allows SQL Injection via the REST web service API...