Vulnerability · Published Oct 30, 2020 · Assigned by snyk

CVE-2020-7759SQL Injection

Medium 6.5

In plain English

A medium-severity security flaw in pimcore/pimcore. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.4% (higher than 72% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)1.4%top 28.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification functionality in ClassificationstoreController. This can be exploited by sending a specifically-crafted input in the relationIds parameter as demonstrated by the following request: http://vulnerable.pimcore.example/admin/classificationstore/relations?relationIds=[{"keyId"%3a"''","groupId"%3a"'asd'))+or+1%3d1+union+(select+1,2,3,4,5,6,name,8,password,'',11,12,'',14+from+users)+--+"}]

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	pimcore/pimcore	6.8.3	GHSA-8jmh-c6vr-pmvm

Affected products (as reported)

Vendor	Product	Versions
n/a	pimcore/pimcore	6.7.2 – before unspecifiedunspecified – before 6.8.3

References

https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1017405 x_refsource_MISC
https://github.com/pimcore/pimcore/pull/7315 x_refsource_MISC