GHSA-qjpx-5m2p-5pgh: SQL Injection
First published: Tue Mar 11 2025(Updated: )
### Summary Authenticated users can craft a filter string used to cause a SQL injection. ### Details _Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._ This code does not look to sanitize inputs: https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47 c.f. with https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347 ### PoC _Complete instructions, including specific configuration details, to reproduce the vulnerability._ ### Impact _What kind of vulnerability is it? Who is impacted?_
| Affected Software | Affected Version | How to fix |
|---|---|---|
| composer/pimcore/pimcore | <11.5.4 | 11.5.4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://github.com/pimcore/pimcore/security/advisories/GHSA-qjpx-5m2p-5pgh
- https://nvd.nist.gov/vuln/detail/CVE-2025-27617
- https://github.com/pimcore/pimcore/commit/19a8520895484e68fd254773e32476565d91deea
- https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47
- https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347
- https://github.com/advisories/GHSA-qjpx-5m2p-5pgh (Advisory)
Frequently Asked Questions
What is the severity of GHSA-qjpx-5m2p-5pgh?
The severity of GHSA-qjpx-5m2p-5pgh is classified as a high-risk SQL injection vulnerability.
How do I fix GHSA-qjpx-5m2p-5pgh?
To fix GHSA-qjpx-5m2p-5pgh, upgrade to version 11.5.4 or later of the Pimcore package.
Who is affected by GHSA-qjpx-5m2p-5pgh?
Authenticated users of versions prior to 11.5.4 of Pimcore are affected by GHSA-qjpx-5m2p-5pgh.
What type of vulnerability is GHSA-qjpx-5m2p-5pgh?
GHSA-qjpx-5m2p-5pgh is a SQL injection vulnerability that allows authenticated users to craft malicious filter strings.
What software does GHSA-qjpx-5m2p-5pgh affect?
GHSA-qjpx-5m2p-5pgh affects the Pimcore package specifically versions before 11.5.4.
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-qjpx-5m2p-5pgh
- alias/CVE-2025-27617
- agent/software-canonical-lookup
- agent/weakness
- agent/source
- agent/softwarecombine
- agent/references
- agent/last-modified-date
- agent/type
- agent/description
- agent/first-publish-date
- agent/tags
- agent/event
- package-manager/composer