Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: pimcore/pimcore 10.5.18 Clear all filters
TI-2023-01057 CVE-2023-1117 · GHSA-qxcw-rf4v-hp26

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00401 Published 2023-03-01 Fixed in 10.5.18 CWE-79
TI-2023-01056 CVE-2023-1116 · GHSA-96hp-38wx-j3wc

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0051 Published 2023-03-01 Fixed in 10.5.18 CWE-79
TI-2023-01055 CVE-2023-1115 · GHSA-97cp-8873-v2gf

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Priority MEDIUM 58

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00553 Published 2023-03-01 Fixed in 10.5.18 CWE-79