What is GHSA-2v7p-f4qm-r5pc?

GHSA-2v7p-f4qm-r5pc is a security advisory published by GitHub Security Advisories with High severity. SQL Injection found in Pimcore

Which CVE IDs does GHSA-2v7p-f4qm-r5pc cover?

GHSA-2v7p-f4qm-r5pc covers the following CVE IDs: CVE-2022-1429. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-2v7p-f4qm-r5pc?

GHSA-2v7p-f4qm-r5pc has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-2v7p-f4qm-r5pc?

GHSA-2v7p-f4qm-r5pc affects 1 product, including: composer/pimcore/pimcore:\u003c 10.3.6.

GHSA-2v7p-f4qm-r5pcHighCVSS 7.5

SQL Injection found in Pimcore

Vendor

GitHub Security Advisories

Published

April 23, 2022

Last Modified

January 27, 2023

🔗 CVE IDs covered (1)

CVE-2022-1429 →

📋 Description

Pimcore is an open source data & experience management platform. A SQL injection was discovered in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6.

🎯 Affected products1

composer/pimcore/pimcore:< 10.3.6

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-1429
https://github.com/pimcore/pimcore/commit/523a735ab94f004459b84ffdfd3db784586bbd82
https://huntr.dev/bounties/cfba30b4-85fa-4499-9160-cd6e3119310e
https://github.com/advisories/GHSA-2v7p-f4qm-r5pc