pimcore admin-ui-classic-bundle vulnerabilities
1 known vulnerability in pimcore admin-ui-classic-bundle from Pimcore. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
pimcore admin-ui-classic-bundle: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column filter. The filter value is concatenated directly into the SQL WHERE clause with