Skip to content

[GHSA-2mhj-fhvg-v428] Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name - #9166

Open
astapc wants to merge 1 commit into
astapc/advisory-improvement-9166from
astapc-GHSA-2mhj-fhvg-v428
Open

[GHSA-2mhj-fhvg-v428] Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name#9166
astapc wants to merge 1 commit into
astapc/advisory-improvement-9166from
astapc-GHSA-2mhj-fhvg-v428