Description (CNA)
SQL injection in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6. This vulnerability is capable of steal the data
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| pimcore / pimcore/pimcore | affected unspecified before 10.3.6 |
CWE
CWE-89
References
- https://huntr.dev/bounties/cfba30b4-85fa-4499-9160-cd6e3119310e
- https://github.com/pimcore/pimcore/commit/523a735ab94f004459b84ffdfd3db784586bbd82
ADP enrichment
No English description supplied.