Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-31867

Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pimcore Pimcore Customer Data Framework

  • 3.0.0 to ≤ 3.0.0affected

References