[pimcore/pimcore] SQL Injection found in Pimcore

Pimcore is an open source data & experience management platform. A SQL injection was discovered in GridHelperService.php in GitHub repository pimcore/pimcore prior to 10.3.6.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-1429
• https://github.com/pimcore/pimcore/commit/523a735ab94f004459b84ffdfd3db784586bbd82
• https://huntr.dev/bounties/cfba30b4-85fa-4499-9160-cd6e3119310e
• https://github.com/advisories/GHSA-2v7p-f4qm-r5pc