Vulnerabilities

TI-2021-02967 CVE-2021-4084 · GHSA-8w3x-r6x7-c5r5

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

LOW 30

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01611 Published 2021-12-10 Fixed in 10.2.6 CWE-79

TI-2021-02964 CVE-2021-4081 · GHSA-3p85-p4qg-hcrp

LOW 29

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0078 Published 2021-12-10 Fixed in 10.2.6 CWE-79

TI-2021-02965 CVE-2021-4082 · GHSA-2v2v-fx7r-f2fh

LOW 20

pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00443 Published 2021-12-10 Fixed in 10.2.6 CWE-352