Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2021-31869

Pimcore AdminBundle 'specificID' SQL Injection

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
rapid7

Description

Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pimcore Pimcore AdminBundle

  • 6.8.0 to ≤ 6.8.0affected

References