Description (CNA)
SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| pimcore / pimcore/pimcore | affected unspecified before 10.3.5 |
CWE
CWE-89
References
- https://huntr.dev/bounties/ae8dc737-844e-40da-a9f7-e72d8e50f6f9
- https://github.com/pimcore/pimcore/commit/adae3be64427466bf0df15ceaea2ac30da93752c
ADP enrichment
No English description supplied.