CyberRota Analysis
AI-GeneratedThe vulnerability in the Pimcore platform allows attackers with the reports_config permission to execute arbitrary SQL queries through the columnConfigAction endpoint, potentially leading to data exfiltration or manipulation. This high-severity flaw affects versions prior to 11.5.17 (LTS) and 12.3.6, and organizations using these versions should prioritize upgrading to mitigate the risk of SQL injection attacks. Immediate action is recommended for users managing sensitive data or relying on the Custom Reports functionality.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, the columnConfigAction endpoint in bundles/CustomReportsBundle/src/Controller/Reports/CustomReportController.php passes malicious SQL configuration through CustomReportController:columnConfigAction, SqlAdapter::getColumns, SqlAdapter::buildQueryString, and Db::fetchAssociative(), allowing an attacker with the reports_config permission to use arbitrary SELECT queries, UNION statements, dangerous database functions, and error-based SQL injection to exfiltrate or manipulate database data. This issue is fixed in versions 11.5.17 (LTS) and 12.3.6.