Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Release: pimcore/pimcore 10.5.21 Clear all filters
TI-2023-02199 CVE-2023-2343 · GHSA-9q7q-r54q-3f3g

Cross-site Scripting (XSS) - DOM in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00378 Published 2023-04-27 Fixed in 10.5.21 CWE-79
TI-2023-02198 CVE-2023-2342 · GHSA-2c67-p4xh-m34w

Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00419 Published 2023-04-27 Fixed in 10.5.21 CWE-79
TI-2023-02196 CVE-2023-2340 · GHSA-g93x-fm2w-5pxw

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00479 Published 2023-04-27 Fixed in 10.5.21 CWE-79
TI-2023-02195 CVE-2023-2339 · GHSA-6fvf-x8c6-2f6j

Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00523 Published 2023-04-27 Fixed in 10.5.21 CWE-79
TI-2023-02194 CVE-2023-2338 · GHSA-4x35-vr82-xvj6

SQL Injection in pimcore/pimcore

Priority HIGH 73

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0091 Published 2023-04-27 Fixed in 10.5.21 CWE-89
TI-2023-02192 CVE-2023-2336 · GHSA-hg77-vx9v-f49x

Path Traversal in pimcore/pimcore

Priority MEDIUM 62

Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00666 Published 2023-04-27 Fixed in 10.5.21 CWE-22
TI-2023-02184 CVE-2023-2328 · GHSA-2295-vh28-pphc

Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00403 Published 2023-04-27 Fixed in 10.5.21 CWE-79
TI-2023-02183 CVE-2023-2327 · GHSA-x9xj-pqmv-8jf7

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00403 Published 2023-04-27 Fixed in 10.5.21 CWE-79
TI-2023-02179 CVE-2023-2323 · GHSA-cjv6-w5hf-5wr6

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00508 Published 2023-04-27 Fixed in 10.5.21 CWE-79
TI-2023-02178 CVE-2023-2322 · GHSA-476g-v7hf-cw5m

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00563 Published 2023-04-27 Fixed in 10.5.21 CWE-79