CVE-2023-3673
HighCVSS 7.2Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
There is a SQL Injection vulnerability in the GitHub repository pimcore/pimcore prior to version 10.5.24.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the exposure of sensitive data.
Recommendation
It is recommended to upgrade to version 10.5.24 or later to mitigate the risks associated with this vulnerability.
Other vulnerabilities in pimcore/pimcore
See all- CVE-2023-4453Medium
A Cross-site Scripting (XSS) vulnerability is reflected in the GitHub repository pimcore/pimcore prior to version 10.6.8.
- CVE-2023-3822Medium
A Cross-site Scripting (XSS) vulnerability - Reflected exists in the GitHub repository pimcore/pimcore prior to version 10.6.4.
- CVE-2023-3821Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository pimcore/pimcore prior to version 10.6.4, allowing for the storage of malicious code.
- CVE-2023-3820High
There is an SQL Injection vulnerability in the GitHub repository pimcore/pimcore prior to version 10.6.4.
Original NVD description (English source)
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.