Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-3673: [Task]: Improve Admin translation and application logger sorting (#15… · pimcore/pimcore@a06ce0a

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.

CVE
#sql#js#git

Expand Up

@@ -37,12 +37,12 @@ public static function extractSortingSettings($params)

$sortParam = json_decode($sortParam, true);

$sortParam = $sortParam[0];

$order = strtoupper($sortParam[‘direction’]) === ‘DESC’ ? ‘DESC’ : 'ASC’;

if (substr($sortParam[‘property’], 0, 1) != ‘~’) {

$orderKey = $sortParam[‘property’];

$order = $sortParam[‘direction’];

} else {

$orderKey = $sortParam[‘property’];

$order = $sortParam[‘direction’];

$parts = explode('~’, $orderKey);

Expand Down

Related news

GHSA-rxp5-qwrf-pfv3: Pimcore SQL Injection vulnerability

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907