CVE-2021-37702: Pimcore

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Pimcore is an open source data & experience management platform. Prior to version 10.1.1, Data Object CSV import allows formular injection. The problem is patched in 10.1.1. Aside from upgrading, one may apply the patch manually as a workaround.

Affected products

• Pimcore Pimcore: before 10.1.1 (fixed in 10.1.1)

Published 2021-08-18. Last modified 2026-06-17.