Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

packagist pimcore/pimcore Security Advisories

Browse all Security Advisories for packagist pimcore/pimcore

Loading...
High
GSA_kwCzR0hTQS1ocTc2LTY2MngtN213NM4AA_QC
Pimcore includes vulnerable PHPOffice/PhpSpreadsheet
Ecosystems: packagist
Packages: pimcore/pimcore, pimcore/admin-ui-classic-bundle, pimcore/data-importer
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: 3 months ago
High
GSA_kwCzR0hTQS0yNzdjLTV2dmotOXB3eM4AA8ss
Flooding Server with Thumbnail files
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: 6 months ago
Moderate
GSA_kwCzR0hTQS12andnLTI4Z3YtcG04aM4AA7R7
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: 7 months ago
Moderate
GSA_kwCzR0hTQS01NzM3LXJxdjQtdjQ0Nc4AA6Tc
Pimcore Preview Documents are not restricted to logged in users anymore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: 8 months ago
High
GSA_kwCzR0hTQS03MmhoLXhmNzktNDI5cM4AA3ML
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS1qNTl2LWhoNHAtcTkybc4AA20D
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 1 year ago
Moderate
GSA_kwCzR0hTQS01OTl2LWgzcTUtZzZyOc4AA1aZ
Pimcore Cross-site Scripting (XSS) vulnerability in DataObject datetime fields
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0zNGhqLXY4Zm0teDg4N84AA1CJ
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: over 1 year ago
High
GSA_kwCzR0hTQS1yODdyLTk4MnEtMmMzcc4AA01l
Pimcore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.9
Published: over 1 year ago
High
GSA_kwCzR0hTQS1jOWh3LTU1N3EtZjhocc4AA01k
Pimcore vulnerable to SQL Injection in Dataobjects sorting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS12bXB2LXFqaHEtcjQ2M84AA01a
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 14.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS03OHEyLWN2M3AteDlmbc4AA01Y
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 1 year ago
High
GSA_kwCzR0hTQS1yeHA1LXF3cmYtcGZ2M84AA0ta
Pimcore SQL Injection vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 17.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00NmczLWY5cjgteGo0ds4AAzpL
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1tNG12LXJtcjctaDVmNc4AAzpI
Pimcore Privilege Defined With Unsafe Actions vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1xM3A0LXYyY20tcTk0Nc4AAzWk
Pimcore Cross-site Scripting vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS13NzY2LTM1NzItZjJods4AAzSl
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1taHBqLTdtN2gtOHA2eM4AAzSc
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1tNm05LWdyODUtNzl2bc4AAzRH
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1xN2NjLW02anctbTI2Ms4AAzRG
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1nMm1jLWZxcWMtaHhnM84AAzD1
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS05eGc2LTc1bWgtN3gzZs4AAzCi
Cross-site Scripting (XSS) in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1qNWMzLXI4NGYtOTU5Ns4AAzAV
Arbitrary File Read in Admin JS CSS files
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 10.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1nOTN4LWZtMnctNXB4d84AAzAU
Cross-site Scripting (XSS) in DataObject columns grid
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS02ZnZmLXg4YzYtMmY2as4AAzAT
Cross-site Scripting (XSS) in DataObject Any Getter grid operator
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1oZzc3LXZ4OXYtZjQ5eM4AAzAS
Path Traversal in Asset "import from server" option
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1yN21tLWp4NmgtaHY3bc4AAzAR
Cross-site Scripting (XSS) in Conditions tab of Pricing Rules
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 10.0
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0yMjk1LXZoMjgtcHBoY84AAzAC
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 12.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS14OXhqLXBxbXYtOGpmN84AAzAB
Cross-site Scripting (XSS) in pimcore via DataObject Class date fields
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 10.0
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1janY2LXc1aGYtNXdyNs4AAzAA
Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00NzZnLXY3aGYtY3c1bc4AAy__
Cross-site Scripting (XSS) in Document Properties Parameter
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 12.9
Published: over 1 year ago
High
GSA_kwCzR0hTQS00eDM1LXZyODIteHZqNs4AAy_6
SQL Injection in AssetController
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0yYzY3LXA0eGgtbTM0d84AAy_5
Cross-site Scripting (XSS) in Website Settings name field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1mcTk1LXJ4NHEtcWdnMs4AAy_4
Cross-site Scripting (XSS) in Admin Login too many attempts notice
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS05cTdxLXI1NHEtM2YzZ84AAy_3
Cross-site Scripting (XSS) in DataObject Classification Store
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
High
GSA_kwCzR0hTQS1qd2c0LXFjZ3YtNXdnNs4AAy_2
SQL Injection in Admin Translations API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 1 year ago
High
GSA_kwCzR0hTQS14bWc4LXc0NjUtbXI1Ns4AAy_1
SQL Injection in Translation Export API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 1 year ago
High
GSA_kwCzR0hTQS02bWhtLWdjcGYtNWdyOM4AAy_0
SQL Injection in Admin Search Find API
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00ZjI1LTJ4MmMtdmc2ds4AAyhj
pimcore is vulnerable to cross-site scripting in Composite indices key field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS03cjM1LWNodjQteHIzcs4AAye9
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS02cWptLTM5dmgtNzI5d84AAye8
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1oZm1nLWczOWMtNTQ0NM4AAye7
pimcore is vulnerable to cross-site scripting in translate module
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS12ZjdxLWcycHYtanh2eM4AAyO9
Pimcore vulnerable to improper quoting of filters in Custom Reports
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00MmMzLXd2d3ctZ2Nxas4AAyO8
Pimcore Remote Code Execution vulnerability in Search function
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1yY2c5LWhyaHgtNnE2Oc4AAyMM
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS02NmNtLWM3Y2gtNWo4cc4AAyML
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS00Mng4LTJ2NTMtcHFtas4AAyMK
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: over 1 year ago
High
GSA_kwCzR0hTQS14YzlwLXI1cWotOHhtOc4AAyK5
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 19.7
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS14NWozLW1xOWctOGpjOM4AAyK4
Cross-site Scripting (XSS) in UrlSlug Data type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0yeHBtLWNtdnctM2pjY84AAyKA
Reflected XSS in Application Logger module
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS0zMjIzLXc3NzQtOTlmcc4AAyJ_
Cross-site Scripting (XSS) in Document Types
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1ycndtLTh3cW0tZ3dnds4AAyJ-
Cross-site Scripting (XSS) - stored in Print Documents
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1naDRnLTY1ZjYtODRnNc4AAyBs
pimcore is vulnerable to cross-site scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS04anY3LXZ3cmMtbXY0Z84AAyAp
Cross-site Scripting (XSS) in pimcore/pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 11.9
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS05NmhwLTM4d3gtajN3Y84AAx57
Pimcore vulnerable to Cross Site Scripting in Email Blacklist
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1xeGN3LXJmNHYtaHAyNs4AAx56
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS05N2NwLTg4NzMtdjJnZs4AAx55
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS1mMmpoLW1mMmMtODI3OM4AAx0h
Pimcore vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 1 year ago
Moderate
GSA_kwCzR0hTQS03NnI3LWg0NnctNDYzcs4AAxps
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS0zdzk2LXA2dmgtYzI5OM4AAxni
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.7
Published: almost 2 years ago
High
GSA_kwCzR0hTQS1yMnZxLXA2NTgtcDI3NM4AAxlx
SameSite Attribute vulnerability in pimCore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS04eHY0LWpqNGgtcXd3Ns4AAxYX
Pimcore contains Unrestricted Upload of File with Dangerous Type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 2 years ago
Moderate
GSA_kwCzR0hTQS02dmY2LWczcHItajgzaM4AAxFw
pimcore is vulnerable to cross-site scripting via "title field " in data objects
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 2 years ago
Critical
GSA_kwCzR0hTQS01cXhxLXZnbW0tcTM5bc4AAvli
RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS13cXI2LTU3cW0taGhyNc4AAu-u
Pimcore vulnerable to cross site scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS00ODQ5LXgzangtNDVxcs4AAu07
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: about 2 years ago
Moderate
GSA_kwCzR0hTQS1wcjRmLTRwY3gtMnIzaM4AAuZp
Pimcore Cross-site Scripting (XSS)
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.7
Published: about 2 years ago
High
GSA_kwCzR0hTQS1ndm1mLXdjeDYtcDk3NM4AAs60
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 20.2
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS1oZjYyLTV2eGgtanB3as4AAitU
Pimcore 2FA Vulnerable to Brute Forcing
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: over 2 years ago
Critical
GSA_kwCzR0hTQS1qaGNmLWo0aGctdjY0cs4AAitC
Pimcore Access Control Issues
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 24.4
Published: over 2 years ago
High
GSA_kwCzR0hTQS04ODg5LTlnM2YtNzNyas4AAitK
Pimcore Discloses Usernames In Use
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1tNHgzLXhtanYtcjc3OM4AAitR
Pimcore Cross-site Scripting (XSS) vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS02NXA4LTU0MjMtZnczeM4AAiji
Pimcore XSS Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.2
Published: over 2 years ago
High
GSA_kwCzR0hTQS1jeGo3LTRqcGotMnEzOM4AAiD2
Pimcore Unrestricted Upload of File with Dangerous Type
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 2 years ago
High
GSA_kwCzR0hTQS0zNTJ4LWhjMmYtZndmZs4AAiD6
Pimcore RCE via PHAR upload
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 2 years ago
High
GSA_kwCzR0hTQS1nN3BqLTN2OTctM3Z4cM4AAems
Pimcore Vulnerable to PHP Object Injection Attacks
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 0.0
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1xNGh3LWM2NmgtNHhxY84AAVvi
Pimcore SQLi Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: over 2 years ago
High
GSA_kwCzR0hTQS1nbWZmLXZjdjYtbW1mcs4AAVvS
Pimcore CSRF Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS0yNzZyLTI0eHEtaHdnOM4AAU63
Pimcore XSS Vulnerability
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
High
GSA_kwCzR0hTQS03aHFyLWoyNm0tZ213cM4AAQnJ
Pimcore Unserialize Remote Code Execution
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 21.9
Published: over 2 years ago
High
GSA_kwCzR0hTQS0ydjdwLWY0cW0tcjVwY80_rw
SQL Injection found in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS14Y3IzLTRxdnItNTRyaM07zw
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.9
Published: over 2 years ago
High
GSA_kwCzR0hTQS1tajJjLTVtanYtZ21tas07WA
SQL Injection in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: over 2 years ago
High
GSA_kwCzR0hTQS02Z203LWo2NjgtdzZoOc05sw
SQL Injection in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 18.7
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1wYzMyLXg3MzctNzRjds0zpg
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1qMjlmLW0yM2gtM3A4cM0zyw
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS14bXEzLWhnangtNjk5N80zxQ
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS0yMmhjLTQ3Y2MtN3g2Zs0zFQ
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1nNzk1LTRoeHgtcXF3bc0zKA
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1xNjdmLTNqcTQtbXd3Ms0wVg
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS02cWNjLXdoZ3AtcGpqMs0wag
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1nanE0LTY5d2otcDZwcs0uLA
Path traversal in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 16.2
Published: over 2 years ago
Moderate
GSA_kwCzR0hTQS1oOXZjLTJwOWctNjNncM0r-w
Exposure of Sensitive Information to an Unauthorized Actor in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 15.9
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS1jZzNoLXJjOXEtZzh2Oc0pwQ
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS1teGgzLTI2OTktOThnOc0pxg
Cross-site Scripting pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS04eDQ0LXB3cjItcmdjNs0nMA
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS1mN3E2LXh4cGgtbWZtOM0m0A
Cross-site Scripting in Pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS00NTV3LWd2NXAtd2dnM80kXg
Cross-site Scripting in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS01NGh3LW1oZ2gteDR2Y80kXQ
Business Logic Errors in pimcore
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 10.7
Published: almost 3 years ago
Moderate
GSA_kwCzR0hTQS12NTY3LXEyNjctcGhwZ80kBg
pimcore is vulnerable to Cross-site Scripting
Ecosystems: packagist
Packages: pimcore/pimcore
Source: GitHub Advisory Database
Blast Radius: 13.4
Published: almost 3 years ago
Statistics
Advisories: 20,668
Packages: 9,040
Repositories: 3
Ecosystems: 12
Filter by Package
moodle/moodle 367 magento/community-edition 235 typo3/cms 174 pimcore/pimcore 118 dolibarr/dolibarr 113 typo3/cms-core 106 microweber/microweber 94 phpmyadmin/phpmyadmin 92 drupal/core 92 silverstripe/framework 85 drupal/drupal 78 librenms/librenms 74 thorsten/phpmyfaq 70 symfony/symfony 69 concrete5/concrete5 60 shopware/platform 52 baserproject/basercms 47 craftcms/cms 46 shopware/core 40 showdoc/showdoc 40 intelliants/subrion 39 froxlor/froxlor 38 nilsteampassnet/teampass 37 mautic/core 37 snipe/snipe-it 35 zendframework/zendframework1 34 shopware/shopware 30 getgrav/grav 29 mediawiki/core 28 centreon/centreon 27 prestashop/prestashop 26 magento/core 24 contao/core-bundle 24 simplesamlphp/simplesamlphp 23 remdex/livehelperchat 23 zendframework/zendframework 23 grumpydictator/firefly-iii 23 pocketmine/pocketmine-mp 23 tribalsystems/zenario 22 getkirby/cms 22 funadmin/funadmin 20 laravel/framework 20 contao/contao 19 forkcms/forkcms 18 cockpit-hq/cockpit 18 topthink/framework 18 ezsystems/ezpublish-kernel 17 francoisjacquet/rosariosis 17 cakephp/cakephp 17 opencart/opencart 17 genix/cms 17 symfony/security 17 yetiforce/yetiforce-crm 16 typo3/cms-backend 16 openmage/magento-lts 16 phpbb/phpbb 16 october/system 15 ec-cube/ec-cube 15 smarty/smarty 15 symfony/security-http 15 phpmailer/phpmailer 14 feehi/cms 14 bolt/bolt 14 dompdf/dompdf 14 silverstripe/cms 14 codeigniter4/framework 13 pimcore/admin-ui-classic-bundle 13 sylius/sylius 13 lavalite/cms 13 elefant/cms 13 admidio/admidio 13 impresscms/impresscms 13 studio-42/elfinder 13 phpmyfaq/phpmyfaq 12 wwbn/avideo 12 symfony/http-foundation 12 phpoffice/phpspreadsheet 12 tinymce 11 TinyMCE 11 feehi/feehicms 11 wallabag/wallabag 11 ezsystems/ezplatform-kernel 11 pagekit/pagekit 11 nukeviet/nukeviet 11 tinymce/tinymce 11 ezsystems/ezpublish-legacy 10 yiisoft/yii2 10 ssddanbrown/bookstack 10 october/october 10 sulu/sulu 10 bootstrap 9 alextselegidis/easyappointments 9 statamic/cms 9 contao/core 9 bootstrap 9 concrete5/core 9 org.webjars:bootstrap 9 kevinpapst/kimai2 9 bootstrap 9 twbs/bootstrap 9 composer/composer 8 silverstripe/graphql 8 facturascripts/facturascripts 8 pimcore/customer-management-framework-bundle 8 october/cms 8 twig/twig 8 croogo/croogo 8 silverstripe/admin 8 codiad/codiad 8 ezsystems/ezplatform-admin-ui 8 mantisbt/mantisbt 8 gilacms/gila 8 pterodactyl/panel 8 bootstrap-sass 7 bootstrap.sass 7 october/backend 7 symfony/http-kernel 7 flarum/core 7 billz/raspap-webgui 7 passbolt/passbolt_api 7 wpglobus/wpglobus 7 backdrop/backdrop 7 bagisto/bagisto 6 nystudio107/craft-seomatic 6 pear/archive_tar 6 in2code/femanager 6 zoujingli/thinkadmin 6 icecoder/icecoder 6 yiisoft/yii2-dev 6 yourls/yourls 6 directmailteam/direct-mail 6 dweeves/magmi 6 phpseclib/phpseclib 6 oro/platform 6 guzzlehttp/guzzle 6 vrana/adminer 6 gleez/cms 6 neos/neos 5 illuminate/database 5 typo3/flow 5 bootstrap-sass 5 phpservermon/phpservermon 5 bottelet/flarepoint 5 limesurvey/limesurvey 5 ibexa/core 5 cachethq/cachet 5 simplesamlphp/saml2 5 elgg/elgg 5 neos/flow 5 phpxmlrpc/phpxmlrpc 5 silverstripe/assets 5 typo3/cms-install 5 kimai/kimai 5 gugoan/economizzer 5 thinkcmf/thinkcmf 5 anchorcms/anchor-cms 5 codeigniter/framework 5 symfony/security-core 5 mautic/core-lib 5 symfony/security-bundle 5 woocommerce/woocommerce 5 appwrite/server-ce 4 typo3/cms-frontend 4 ezsystems/ezplatform 4 pyrocms/pyrocms 4 zendframework/zendopenid 4 sylius/resource-bundle 4 codeigniter4/shield 4 wintercms/winter 4 idno/known 4 oro/commerce 4 friendsofsymfony/user-bundle 4 reportico-web/reportico 4 automad/automad 4 notrinos/notrinos-erp 4 shopxo/shopxo 4 bref/bref 4 modx/revolution 4 evolutioncms/evolution 4 typo3/html-sanitizer 4 processwire/processwire 4 spatie/browsershot 4 wp-premium/gravityforms 4 magento/product-community-edition 4 bytefury/crater 4 adodb/adodb-php 4 shopware/storefront 4 ezyang/htmlpurifier 4 privatebin/privatebin 3 zendframework/zend-diactoros 3 enhavo/enhavo-app 3 redaxo/source 3 zendframework/zendservice-audioscrobbler 3 buddypress/buddypress 3 bbpress/bbpress 3 zendframework/zendrest 3 rudloff/alltube 3 uvdesk/community-skeleton 3 zencart/zencart 3 typo3/cms-form 3