writeups.xyz / Pimcore: One click, two security vulnerabilities

Submitter : c2a

Date: 15 May 2023

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• SQL Injection
• Arbitrary File Write
• RCE
• Security Code Review

Programs :

• Pimcore

Authors :

• Yaniv Nizry (@YNizry)

Link :
https://www.sonarsource.com/blog/pimcore-one-click-two-security-vulnerabilities/