{"action":"Upgrade pimcore/pimcore to 10.4.4 or later.","affected":[{"fixed":"10.4.4","introduced":"0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2022-31092"],"ecosystem":"Packagist","epss":0.01416,"exploited":false,"fixed_versions":["10.4.4"],"ghsa_id":"GHSA-gvmf-wcx6-p974","id":"tcs_01M5KF34RG3YMP9FS9S6Q99G21","modified_at":"2023-11-08T04:09:25.655213Z","published_at":"2022-06-22T17:58:39Z","references":["https://osv.dev/vulnerability/GHSA-gvmf-wcx6-p974","https://github.com/pimcore/pimcore/security/advisories/GHSA-gvmf-wcx6-p974","https://nvd.nist.gov/vuln/detail/CVE-2022-31092","https://github.com/pimcore/pimcore/pull/12444","https://github.com/pimcore/pimcore/commit/21559c6bf0e4e828d33ff7af6e88caecb5ac6549","https://github.com/pimcore/pimcore"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-gvmf-wcx6-p974","url":"https://osv.dev/vulnerability/GHSA-gvmf-wcx6-p974"}],"summary":"Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore"}