CVE-2023-47637
1 advisory.
Packagist/pimcore/pimcore CVE-2023-47637: high 8.8
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Action: Upgrade pimcore/pimcore to 11.1.1 or later.
composer require pimcore/pimcore:11.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 11.1.1 | - |
Fixed versions
| 11.1.1 |
Sources
- osv: GHSA-72hh-xf79-429p
- https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p
- https://nvd.nist.gov/vuln/detail/CVE-2023-47637
- https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0
- https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311
- https://github.com/pimcore/pimcore
- https://github.com/pimcore/pimcore/blob/42b6cfa77c4540205bdd10689893ccb73e4bac8f/models/DataObject/ClassDefinition/Data/Multiselect.php#L285-L312
CVE-2023-47637 · published · modified · JSON