Pimcore Vulnerable to SQL Injection in getRelationFilterCondition

CAO 8.8CVE-2025-27617 · GHSA-qjpx-5m2p-5pgh · Công bố 11/03/2025 · cập nhật 17/06/2026

Tóm tắt nhanh

CVE-2025-27617 là lỗ hổng mức CAO (CVSS 8.8) ảnh hưởng pimcore/pimcore, pimcore (pimcore).
Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.50%, cao hơn 42.7% các lỗ hổng khác.
Cách xử lý: cập nhật lên 11.5.4 hoặc mới hơn.

Gói / sản phẩm	Phiên bản bị ảnh hưởng	Phiên bản đã vá
pimcore/pimcore Packagist	`< 11.5.4`	`11.5.4`
pimcore pimcore	`< 11.5.4`	`11.5.4`

Mô tả

Summary

Authenticated users can craft a filter string used to cause a SQL injection.

Details

Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer. This code does not look to sanitize inputs: https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47

c.f. with https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347

PoC

Complete instructions, including specific configuration details, to reproduce the vulnerability.

Impact

What kind of vulnerability is it? Who is impacted?

Mô tả của NVD

Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL injection. Version 11.5.4 fixes the issue.