CVE-2023-47637

Pimcore is an Open Source Data & Experience Management Platform. In affected versions the `/admin/object/grid-proxy` endpoint calls `getFilterCondition()` on fields of classes to be filtered for, passing input from the request, and later executes the returned SQL. One implementation of `getFilterCondition()` is in `Multiselect`, which does not normalize/escape/validate the passed value. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level. This vulnerability has been addressed in version 11.1.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-89

• https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311Product
• https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0Patch
• https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429pExploit, Vendor Advisory
• https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311Product
• https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0Patch
• https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429pExploit, Vendor Advisory

Published

Nov 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-47630Kyverno is a policy engine designed for Kubernetes. An issue…7.1
• CVE-2023-47631vantage6 is a framework to manage and deploy privacy enhanci…8.8
• CVE-2023-47633Traefik is an open source HTTP reverse proxy and load balanc…7.5
• CVE-2023-47634Decidim is a participatory democracy framework. Starting in …3.1
• CVE-2023-47635Decidim is a participatory democracy framework. Starting in …5.7
• CVE-2023-47636The Pimcore Admin Classic Bundle provides a Backend UI for P…5.3
• CVE-2023-47638Rejected reason: Confirm reference is not public.
• CVE-2023-47639API Platform Core is a system to create hypermedia-driven RE…5.3
• CVE-2023-4764Incorrect security UI in BFCache in Google Chrome prior to 1…6.5
• CVE-2023-47640DataHub is an open-source metadata platform. The HMAC signat…8.8
• CVE-2023-47641aiohttp is an asynchronous HTTP client/server framework for …6.5
• CVE-2023-47642Zulip is an open-source team collaboration tool. It was disc…4.3