https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 08:09:25 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-211390 EUVD-2026-211390 https://cve.radiocsirt.org/vuln/euvd-2026-211390 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2756 <p>SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.</p> <p>SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2756 https://cve.radiocsirt.org/vuln/ghsa-25fx-3c2q-cq46 <p><strong>Affected:</strong> Packagist: pimcore/customer-management-framework-bundle</p> <p>### Impact An administrator user can use the inheritable segments feature to execute his own blind SQL queries.</p> <p>A user with administrator privileges can run any SQL query on database. This can be used to retrieve sensitive data, change database information or any other malicious activity against the database.</p> <p>### Patches Update to version 3.3.10 or apply this patch manually https://github.com/pimcore/customer-data-framework/commit/76df151737b7964ce5169fdf9e27a0ad801757fe.patch</p> <p>### Workarounds Apply https://github.com/pimcore/customer-data-framework/commit/76df151737b7964ce5169fdf9e27a0ad801757fe.patch manually.</p> <p>### References https://huntr.dev/bounties/cf398528-819f-456e-88e7-c06d268d3f44/</p> <p><strong>Affected:</strong> Packagist: pimcore/customer-management-framework-bundle</p> <p>### Impact An administrator user can use the inheritable segments feature to execute his own blind SQL queries.</p> <p>A user with administrator privileges can run any SQL query on database. This can be used to retrieve sensitive data, change database information or any other malicious activity against the database.</p> <p>### Patches Update to version 3.3.10 or apply this patch manually https://github.com/pimcore/customer-data-framework/commit/76df151737b7964ce5169fdf9e27a0ad801757fe.patch</p> <p>### Workarounds Apply https://github.com/pimcore/customer-data-framework/commit/76df151737b7964ce5169fdf9e27a0ad801757fe.patch manually.</p> <p>### References https://huntr.dev/bounties/cf398528-819f-456e-88e7-c06d268d3f44/</p> https://cve.radiocsirt.org/vuln/ghsa-25fx-3c2q-cq46 https://cve.radiocsirt.org/vuln/gsd-2023-2756 gsd-2023-2756 https://cve.radiocsirt.org/vuln/gsd-2023-2756