← CVE Intelligence

CVE-2021-31867

Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection PUBLISHED

Description (CNA)

Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.

Affected (CNA)

Vendor / productVersions
Pimcore / Pimcore Customer Data Frameworkaffected 3.0.0 through 3.0.0

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.