Headline
CVE-2023-3673: [Task]: Improve Admin translation and application logger sorting (#15… · pimcore/pimcore@a06ce0a
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.
Expand Up
@@ -37,12 +37,12 @@ public static function extractSortingSettings($params)
$sortParam = json_decode($sortParam, true);
$sortParam = $sortParam[0];
$order = strtoupper($sortParam[‘direction’]) === ‘DESC’ ? ‘DESC’ : 'ASC’;
if (substr($sortParam[‘property’], 0, 1) != ‘~’) {
$orderKey = $sortParam[‘property’];
$order = $sortParam[‘direction’];
} else {
$orderKey = $sortParam[‘property’];
$order = $sortParam[‘direction’];
$parts = explode('~’, $orderKey);
Expand Down
Related news
GHSA-rxp5-qwrf-pfv3: Pimcore SQL Injection vulnerability
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.