CVE-2023-3820

HighCVSS 7.2

Published: 21/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.96%

57th percentile - higher than 57% of all known CVEs

Summary

There is an SQL Injection vulnerability in the GitHub repository pimcore/pimcore prior to version 10.6.4.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to data disclosure or modification.

Recommendation

It is recommended to upgrade to version 10.6.4 or later to mitigate this vulnerability.

Other vulnerabilities in pimcore/pimcore

See all

CVE-2023-4453Medium
A Cross-site Scripting (XSS) vulnerability is reflected in the GitHub repository pimcore/pimcore prior to version 10.6.8.
CVE-2023-3822Medium
A Cross-site Scripting (XSS) vulnerability - Reflected exists in the GitHub repository pimcore/pimcore prior to version 10.6.4.
CVE-2023-3821Medium
A Cross-site Scripting (XSS) vulnerability exists in the GitHub repository pimcore/pimcore prior to version 10.6.4, allowing for the storage of malicious code.
CVE-2023-3673High
There is a SQL Injection vulnerability in the GitHub repository pimcore/pimcore prior to version 10.5.24.

Original NVD description (English source)

SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4.