{"action":"Upgrade pimcore/pimcore to 10.6.4 or later.","affected":[{"fixed":"10.6.4","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2023-3820"],"ecosystem":"Packagist","epss":0.01155,"exploited":false,"fixed_versions":["10.6.4"],"ghsa_id":"GHSA-c9hw-557q-f8hq","id":"tcs_01M5KF0VCQDJ0PJC0VR7M9W825","modified_at":"2024-02-16T08:21:32.115137Z","published_at":"2023-07-21T20:18:16Z","references":["https://osv.dev/vulnerability/GHSA-c9hw-557q-f8hq","https://github.com/pimcore/pimcore/security/advisories/GHSA-c9hw-557q-f8hq","https://nvd.nist.gov/vuln/detail/CVE-2023-3820","https://github.com/pimcore/pimcore/commit/e641968979d4a2377bbea5e2a76bdede040d0b97","https://github.com/pimcore/pimcore","https://huntr.dev/bounties/b00a38b6-d040-494d-bf46-38f46ac1a1db"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-c9hw-557q-f8hq","url":"https://osv.dev/vulnerability/GHSA-c9hw-557q-f8hq"}],"summary":"Pimcore vulnerable to SQL Injection in Dataobjects sorting"}