CVE-2021-31869: Pimcore AdminBundle 'specificID' SQL Injection
Published Aug 4, 2021
·Updated
Pimcore AdminBundle version 6.8.0 and earlier suffers from a SQL injection issue in the specificID variable used by the application. This issue was fixed in version 6.9.4 of the product.
Affected Software
2 affected components
Pimcore AdminBundle<6.9.4
Pimcore pimcore<6.9.4
Event History
Aug 4, 2021
CVE Published
via MITRE·10:20 PM
Data Sourced
via MITRE·10:20 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-31869?
CVE-2021-31869 has been rated as a high severity vulnerability due to its potential for SQL injection.
2
How do I fix CVE-2021-31869?
To fix CVE-2021-31869, you must update Pimcore AdminBundle to version 6.9.4 or later.
3
What systems are affected by CVE-2021-31869?
CVE-2021-31869 affects Pimcore AdminBundle versions 6.8.0 and earlier.
4
What type of vulnerability is CVE-2021-31869?
CVE-2021-31869 is categorized as a SQL injection vulnerability.
5
When was CVE-2021-31869 reported?
CVE-2021-31869 was reported in 2021 and is significant due to its impact on database security.