THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-2mhj-fhvg-v428 (high) — Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name

[GHSA] GHSA-2mhj-fhvg-v428 (high) — Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name

highgithub_advisoriesPublished 2026-08-13

GHSA-2mhj-fhvg-v428 Severity: high CVE: CVE-2026-55072

Pimcore: ClassDefinition UID regex missing end anchor allows SQL injection via Block.php unquoted table name

### Summary A missing end anchor (`$`) in the ClassDefinition UID validation regex allows an authenticated user with the `objects` permission to create a class with a malicious UID containing SQL. When a data object of that class is l

Indicators of compromise

Original source: https://github.com/advisories/GHSA-2mhj-fhvg-v428