https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 06:15:26 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-12128 cnvd-2025-12128 https://cve.radiocsirt.org/vuln/cnvd-2025-12128 https://cve.radiocsirt.org/vuln/euvd-2026-222194 EUVD-2026-222194 https://cve.radiocsirt.org/vuln/euvd-2026-222194 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27617 <p>Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL injection. Version 11.5.4 fixes the issue.</p> <p>Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL injection. Version 11.5.4 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27617 https://cve.radiocsirt.org/vuln/ghsa-qjpx-5m2p-5pgh <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Summary Authenticated users can craft a filter string used to cause a SQL injection.</p> <p>### Details _Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._ This code does not look to sanitize inputs: https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47</p> <p>c.f. with https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347</p> <p>### PoC _Complete instructions, including specific configuration details, to reproduce the vulnerability._</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_</p> <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Summary Authenticated users can craft a filter string used to cause a SQL injection.</p> <p>### Details _Give all details on the vulnerability. Pointing to the incriminated source code is very helpful for the maintainer._ This code does not look to sanitize inputs: https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47</p> <p>c.f. with https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347</p> <p>### PoC _Complete instructions, including specific configuration details, to reproduce the vulnerability._</p> <p>### Impact _What kind of vulnerability is it? Who is impacted?_</p> https://cve.radiocsirt.org/vuln/ghsa-qjpx-5m2p-5pgh