Skip to content
Sign in
8.3 High

CVE-2021-23405 This affects the package pimcore/pimcore before 10.0.7

Description

This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.

Affected products and versions

Product Affected versions Fixed in
pimcore/pimcore 10.0 earliest → < 10.0.7 10.0.7

Other CVEs of pimcore/pimcore

The 4 CVEs of pimcore/pimcore →
CVE-2021-23340 This affects the package pimcore/pimcore before 6.8.8 7.1 High CVE-2020-7759 The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification… 6.5 Medium CVE-2019-10763 pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection Not rated
Track this CVE