CVE-2023-30849

Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.

• CWE-89

• https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patchPatch
• https://github.com/pimcore/pimcore/pull/14968Vendor Advisory
• https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56Patch, Vendor Advisory
• https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patchPatch
• https://github.com/pimcore/pimcore/pull/14968Vendor Advisory
• https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56Patch, Vendor Advisory

Published

Apr 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-30843Payload is a free and open source headless content managemen…6.5
• CVE-2023-30844Mutagen provides real-time file synchronization and flexible…8.8
• CVE-2023-30845ESPv2 is a service proxy that provides API management capabi…9.8
• CVE-2023-30846typed-rest-client is a library for Node Rest and Http Client…7.5
• CVE-2023-30847H2O is an HTTP server. In versions 2.3.0-beta2 and prior, wh…8.2
• CVE-2023-30848Pimcore is an open source data and experience management pla…8.8
• CVE-2023-3085A vulnerability, which was classified as problematic, has be…6.1
• CVE-2023-30850Pimcore is an open source data and experience management pla…8.8
• CVE-2023-30851Cilium is a networking, observability, and security solution…5.3
• CVE-2023-30852Pimcore is an open source data and experience management pla…4.9
• CVE-2023-30853Gradle Build Action allows users to execute a Gradle Build i…6.5
• CVE-2023-30854AVideo is an open source video platform. Prior to version 12…8.8