Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7320
HistoryAug 17, 2018 - 6:14 a.m.

SQL Injection

2018-08-1706:14:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

EPSS

0.009

Percentile

82.9%

pimcore/pimcore is vulnerable to SQL Injection attacks. The library does not sanitize API endpoints properly, allowing a malicious user to inject and execute arbitrary SQL queries through the REST web service API.