CVE-2019-10763: Pimcore

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection. An attacker with limited privileges (classes permission) can achieve a SQL injection that can lead in data leakage. The vulnerability can be exploited via 'id', 'storeId', 'pageSize' and 'tables' parameters, using a payload for trigger a time based or error based sql injection.

Affected products

• Pimcore Pimcore: before 6.3.0 (fixed in 6.3.0)

Published 2019-11-18. Last modified 2026-06-17.