[GHSA-3234-gxc3-pq6f] Pimcore Vulnerable to SQL Injection in Custom Reports Column Configuration

[kingjia90]

Updates

• Affected products

Comments
the version with the fix for 11.5.x got released

[github]

Hi there @kingjia90! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[Copilot]

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates a GitHub-reviewed security advisory by refreshing metadata and expanding the affected package/version range details.

Changes:

• Updated the advisory modified timestamp.
• Added a new affected entry for pimcore/pimcore with range info and last-known affected versions.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[github]

Hi there @kingjia90! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[github]

Hi there @kingjia90! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory