{"id":"GHSA-q8cr-xphm-7gfv","aliases":["CVE-2017-1000009"],"title":"Akeneo PIM vulnerable to shell injection in the mass edition","description":"Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.","severity":"critical","score":9.8,"published":"2022-05-13T01:24:28.000Z","modified":"2024-04-25T21:57:34.317Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"akeneo/pim-community-dev","ranges":[{"events":[{"introduced":"1.4"},{"fixed":"1.4.28"}],"type":"ECOSYSTEM"}],"versions":["v1.4.0","v1.4.0-ALPHA1","v1.4.0-BETA1","v1.4.0-BETA2","v1.4.0-BETA3","v1.4.0-RC1","v1.4.1","v1.4.10","v1.4.11","v1.4.12","v1.4.13","v1.4.14","v1.4.15","v1.4.16","v1.4.17","v1.4.18","v1.4.19","v1.4.2","v1.4.20","v1.4.21","v1.4.22","v1.4.23","v1.4.24","v1.4.25","v1.4.26","v1.4.27","v1.4.3","v1.4.4","v1.4.5","v1.4.6","v1.4.7","v1.4.8","v1.4.9"],"fixed":["1.4.28"]},{"ecosystem":"Packagist","name":"akeneo/pim-community-dev","ranges":[{"events":[{"introduced":"1.5"},{"fixed":"1.5.15"}],"type":"ECOSYSTEM"}],"versions":["v1.5.0","v1.5.0-ALPHA1","v1.5.0-BETA1","v1.5.0-RC1","v1.5.1","v1.5.10","v1.5.11","v1.5.12","v1.5.13","v1.5.14","v1.5.2","v1.5.3","v1.5.4","v1.5.5","v1.5.6","v1.5.7","v1.5.8","v1.5.9"],"fixed":["1.5.15"]},{"ecosystem":"Packagist","name":"akeneo/pim-community-dev","ranges":[{"events":[{"introduced":"1.6"},{"fixed":"1.6.6"}],"type":"ECOSYSTEM"}],"versions":["v1.6.0","v1.6.0-ALPHA1","v1.6.0-ALPHA2","v1.6.0-RC1","v1.6.1","v1.6.2","v1.6.3","v1.6.4","v1.6.5"],"fixed":["1.6.6"]}],"references":["https://nvd.nist.gov/vuln/detail/CVE-2017-1000009","https://github.com/akeneo/pim-community-dev","https://github.com/akeneo/pim-community-dev/blob/1.5/CHANGELOG-1.5.md#bug-fixes-2","https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.4.md#bug-fixes","https://github.com/akeneo/pim-community-dev/blob/master/CHANGELOG-1.6.md#bug-fixes-2"],"sources":[{"name":"OSV","id":"GHSA-q8cr-xphm-7gfv","modified":"2024-04-25T21:57:34.317446Z","url":"https://osv.dev/vulnerability/GHSA-q8cr-xphm-7gfv"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","score":9.8}]}