← CVE Intelligence

CVE-2021-23405

SQL Injection PUBLISHED

Description (CNA)

This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.

Affected (CNA)

Vendor / productVersions
n/a / pimcore/pimcoreaffected unspecified before 10.0.7

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.