Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2021-23405

SQL Injection

Description

This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a pimcore/pimcore

  • unspecified to < 10.0.7affected

References