| Package | Affected versions | Patched versions |
|---|---|---|
| customer management framework | < 3.0.2 | 3.0.2 |
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free