Pimcore SQL Injection Vulnerability in Admin Translations API
CVE-2023-30850

8.8HIGH

Key Information:

Vendor: Pimcore
Status: Pimcore
Vendor: CVE Published:; 27 April 2023

What is CVE-2023-30850?

A vulnerability exists in the Pimcore Experience Management Platform prior to version 10.5.21 that allows for SQL Injection via the admin translations API. This can result in unauthorized access to sensitive data. Users are advised to upgrade to version 10.5.21 to mitigate this risk. Additionally, users can apply the patch manually as a temporary solution. For more details and the patch, refer to the provided documentation.