CVE-2022-1429: Pimcore GridHelperService.php SQL injection allows data theft

Automated analysis

Generated by VULONE's analysis model from the NVD record, CISA KEV and EPSS data on 19 September 2026. Confidence: high.

high priorityUnauthenticated remote SQL injection with high confidentiality impact, a public exploit reference, and very high EPSS score, though not yet in KEV.

What it is

Pimcore versions prior to 10.3.6 contain a SQL injection flaw in GridHelperService.php. The vulnerability can be used to steal data from the underlying database. It is remotely reachable without authentication or user interaction, making it a serious exposure for unpatched Pimcore deployments.

Impact

An unauthenticated attacker can inject SQL through the vulnerable GridHelperService endpoint and read data from the Pimcore database. The CVSS vector shows high confidentiality impact with no integrity or availability effect.

Attack surface

Reached over the network via the GridHelperService functionality; the CVSS vector AV:N/AC:L/PR:N/UI:N indicates no authentication and no user interaction are required. The record does not specify the exact HTTP endpoint or parameter.

Exploitation

Not listed in CISA KEV, but EPSS is 0.63859 (99.18th percentile), indicating high predicted exploitation activity. References include an Exploit-tagged huntr bounty and a Patch-tagged commit, so public exploit details and a fix are both available.

What to do

• Upgrade Pimcore to 10.3.6 or later, applying the patch commit 523a735ab94f004459b84ffdfd3db784586bbd82.
• If immediate upgrade is not possible, restrict network access to Pimcore administrative and grid endpoints to trusted sources.
• Review database account privileges used by Pimcore and apply least privilege to limit what a SQL injection can read.
• Monitor for and block SQL injection patterns targeting GridHelperService.php at the WAF or reverse proxy.
• Audit database logs for anomalous queries originating from the Pimcore application.

Detection

• Search web and WAF logs for requests to GridHelperService.php containing SQL metacharacters such as quotes, UNION, or comment sequences.
• Monitor database query logs for unexpected SELECT statements or schema enumeration originating from the Pimcore host.
• Alert on outbound data transfers or large result sets from the Pimcore database user.
• Correlate huntr exploit indicators and known payload patterns against inbound HTTP traffic.

This assessment is produced automatically and is not human-reviewed. Verify against the vendor advisory before acting on it.