| Package | Affected versions | Patched versions |
|---|---|---|
| pimcore/pimcore | < 11.5.4 | 11.5.4 |
| pimcore | < 11.5.4 | 11.5.4 |
Authenticated users can craft a filter string used to cause a SQL injection.
Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer. This code does not look to sanitize inputs: https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47
Complete instructions, including specific configuration details, to reproduce the vulnerability.
What kind of vulnerability is it? Who is impacted?
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free