Vulnerabilities

TI-2022-00197 CVE-2022-0263 · GHSA-c697-r227-pq6h

Unrestricted Upload of File with Dangerous Type in pimcore/pimcore

LOW 36

Unrestricted Upload of File with Dangerous Type in Packagist pimcore/pimcore prior to 10.2.7.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.01115 Published 2022-01-18 Fixed in 10.2.7 CWE-434

TI-2022-00196 CVE-2022-0262 · GHSA-4f5x-q4jc-xfcf

LOW 30

Cross-site Scripting (XSS) - Stored in Packagist pimcore/pimcore prior to 10.2.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0154 Published 2022-01-18 Fixed in 10.2.7 CWE-79

TI-2022-00194 CVE-2022-0260 · GHSA-455w-gv5p-wgg3

LOW 26

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00664 Published 2022-01-18 Fixed in 10.2.7, 10.2.9 CWE-79