{"action":"Upgrade pimcore/pimcore to 11.1.1 or later.","affected":[{"fixed":"11.1.1","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-47637"],"ecosystem":"Packagist","epss":0.01218,"exploited":false,"fixed_versions":["11.1.1"],"ghsa_id":"GHSA-72hh-xf79-429p","id":"tcs_01M5KEXJVJDFC6WD5TBEEJB3KY","modified_at":"2026-09-10T03:50:04.135126087Z","published_at":"2023-11-15T14:53:24Z","references":["https://osv.dev/vulnerability/GHSA-72hh-xf79-429p","https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p","https://nvd.nist.gov/vuln/detail/CVE-2023-47637","https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0","https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311","https://github.com/pimcore/pimcore","https://github.com/pimcore/pimcore/blob/42b6cfa77c4540205bdd10689893ccb73e4bac8f/models/DataObject/ClassDefinition/Data/Multiselect.php#L285-L312"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"GHSA-72hh-xf79-429p","url":"https://osv.dev/vulnerability/GHSA-72hh-xf79-429p"}],"summary":"Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()"}