CVE-2023-2756

CVE-2023-2756 is a high-severity SQL Injection vulnerability affecting the pimcore/customer-data-framework prior to version 3.3.10. An authenticated attacker can exploit this flaw over the network with low complexity, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. While no active exploitation, public exploit code, or significant community discussion has been observed, its high CVSS score and FAUCET Risk Score indicate a serious threat.