CVE-2022-0258: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

January 17, 2022 (updated January 25, 2022)

pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

References

github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd
huntr.dev/bounties/0df891e4-6412-4d9a-a9b7-d9df50311802
nvd.nist.gov/vuln/detail/CVE-2022-0258

Detect and mitigate CVE-2022-0258 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →