CVE-2023-3673: SQL Injection in pimcore/pimcore
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/pimcore/pimcoreto a version that resolves this vulnerability.Fixed in 10.5.24
Event History
Frequently Asked Questions
What is CVE-2023-3673?
CVE-2023-3673 is a SQL Injection vulnerability in the GitHub repository pimcore/pimcore prior to version 10.5.24.
How severe is CVE-2023-3673?
CVE-2023-3673 has a severity rating of 7.2 (high).
What software is affected by CVE-2023-3673?
The software affected by CVE-2023-3673 is pimcore/pimcore prior to version 10.5.24.
How can I fix CVE-2023-3673?
To fix CVE-2023-3673, you should upgrade your pimcore/pimcore installation to version 10.5.24 or later.
Where can I find more information about CVE-2023-3673?
You can find more information about CVE-2023-3673 at the following references: [GitHub Commit](https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9) and [Huntr Dev](https://huntr.dev/bounties/46ca0934-5260-477b-9e86-7b16bb18d0a9).