8.3
Élevée
CVE-2021-23405 This affects the package pimcore/pimcore before 10.0.7
Description
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| pimcore/pimcore 10.0 | premières → < 10.0.7 | 10.0.7 |
Autres CVE de pimcore/pimcore
Les 4 CVE de pimcore/pimcore →
CVE-2021-23340
This affects the package pimcore/pimcore before 6.8.8
7.1
Élevée
CVE-2020-7759
The package pimcore/pimcore from 6.7.2 and before 6.8.3 are vulnerable to SQL Injection in data classification…
6.5
Moyenne
CVE-2019-10763
pimcore/pimcore before 6.3.0 is vulnerable to SQL Injection
Non notée