CVE-2021-31867 — Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php comp…
Published: 2021-08-04 · CVSS: 6.5 · CVSS 3.1
Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7