Описание
Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the admin search find API has a SQL injection vulnerability. Users should upgrade to version 10.5.21 to receive a patch or, as a workaround, apply the patch manually.
Ссылки
- Patch
- Vendor Advisory
- PatchVendor Advisory
- Patch
- Vendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 10.5.21 (исключая)
cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00369
Низкий
8.8 High
CVSS3
Дефекты
CWE-89
Связанные уязвимости
EPSS
Процентиль: 58%
0.00369
Низкий
8.8 High
CVSS3
Дефекты
CWE-89