CVE-2022-1339: SQL injection in ElementController.php in pimcore/pimcore
Published Apr 13, 2022
·Updated
SQL injection in ElementController.php in GitHub repository pimcore/pimcore prior to 10.3.5. This vulnerability is capable of steal the data
Affected Software
1 affected component
Pimcore pimcore<10.3.5
Remediation
Event History
Apr 13, 2022
CVE Published
via MITRE·09:45 AM
Data Sourced
via MITRE·09:45 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-1339?
CVE-2022-1339 is considered a critical SQL injection vulnerability that can lead to data theft.
2
How do I fix CVE-2022-1339?
To fix CVE-2022-1339, upgrade Pimcore to version 10.3.5 or later.
3
What are the potential consequences of CVE-2022-1339?
Exploiting CVE-2022-1339 can allow attackers to access sensitive data from the database.
4
Which versions of Pimcore are affected by CVE-2022-1339?
CVE-2022-1339 affects Pimcore versions prior to 10.3.5.
5
Is there a public disclosure for CVE-2022-1339?
Yes, CVE-2022-1339 has been publicly disclosed as a vulnerability in Pimcore.