Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: pimcore/pimcore 10.5.20 Clear all filters
TI-2023-01599 CVE-2023-1704 · GHSA-hfmg-g39c-5444

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0042 Published 2023-03-29 Fixed in 10.5.20 CWE-79
TI-2023-01598 CVE-2023-1703 · GHSA-4f25-2x2c-vg6v

Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Priority LOW 25

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00457 Published 2023-03-29 Fixed in 10.5.20 CWE-79
TI-2023-01597 CVE-2023-1702 · GHSA-6qjm-39vh-729w

Cross-site Scripting (XSS) - Generic in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-03-29 Fixed in 10.5.20 CWE-79
TI-2023-01596 CVE-2023-1701 · GHSA-7r35-chv4-xr3r

Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.20.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2023-03-29 Fixed in 10.5.20 CWE-79