CVE-2022-0258: SQL Injection in pimcore/pimcore
Published Jan 17, 2022
·Updated
pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
Affected Software
1 affected component
Pimcore pimcore<10.2.8
Remediation
Event History
Jan 17, 2022
CVE Published
via MITRE·03:15 PM
Data Sourced
via MITRE·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0258?
CVE-2022-0258 is classified as a medium severity vulnerability.
2
How do I fix CVE-2022-0258?
To fix CVE-2022-0258, upgrade your Pimcore installation to version 10.2.8 or later.
3
What types of attacks can CVE-2022-0258 lead to?
CVE-2022-0258 can lead to SQL injection attacks which may compromise the database.
4
Which versions of Pimcore are affected by CVE-2022-0258?
CVE-2022-0258 affects all versions of Pimcore prior to 10.2.8.
5
Is CVE-2022-0258 easily exploitable?
CVE-2022-0258 can be exploited by attackers with low skill, especially if input validation is not implemented.