Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: pimcore/pimcore 10.5.21 Clear all filters
TI-2023-02459 CVE-2023-2630 · GHSA-w766-3572-f2hv

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 55

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00576 Published 2023-05-10 Fixed in 10.5.21 CWE-79
TI-2023-02445 CVE-2023-2616 · GHSA-mhpj-7m7h-8p6x

Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00497 Published 2023-05-10 Fixed in 10.5.21 CWE-79
TI-2023-02444 CVE-2023-2615 · GHSA-q7cc-m6jw-m262

Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00497 Published 2023-05-10 Fixed in 10.5.21 CWE-79
TI-2023-02443 CVE-2023-2614 · GHSA-m6m9-gr85-79vm

Cross-site Scripting (XSS) - DOM in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00497 Published 2023-05-10 Fixed in 10.5.21 CWE-79