Vulnerability CVE-2023-2338
Published: 2023-04-27

Description:
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.

Type:

CWE-89

 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

 References:
https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462
https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520
Copyright 2026, cxsecurity.com

 

Back to Top