Non évaluée
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAs...
CVE-2021-31867
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.
Références
- report rapid7.com