Approved changes feed: RSS · Atom

cpe:2.3:a:pimcore:pimcore_customer_data_framework:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPimcore (115a8b86-56a6-5ce9-b491-b05cfe687e20)
ProductPimcore Customer Data Framework (7f176708-79be-5352-809d-459192375886)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-31867 vulnerable 2026-06-03 14:44:33.651234 Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection
MEDIUM (6.5)
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.
Published: 2021-08-04T22:20:35.450Z
Updated: 2024-09-16T17:34:30.111Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.