Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-23405

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-g8jx-66p8-vcm2

SQL injection in pimcore/pimcore This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.

gitlab/packagist/pimcore/pimcore/CVE-2021-23405

A SQL Injection flaw was found in the package pimcore/pimcore. This issue exists due to the absence of check on the `storeId` parameter in the method `collectionsActionGet` and `groupsActionGet` method within the `ClassificationstoreController` class.