Security Advisories - pimcore/pimcore

pimcore/pimcore Security Advisories for v6.7.3 (40)

Pimcore vulnerable to cross site scripting

CVE-2022-3255

Affected version: <=10.5.6

Reported by:
GitHub
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users

CVE-2022-3211

Affected version: <10.5.6

Reported by:
GitHub
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore

CVE-2022-31092

Affected version: <10.4.4

Reported by:
GitHub
SQL Injection found in Pimcore

CVE-2022-1429

Affected version: <10.3.6

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-1351

Affected version: <10.4

Reported by:
GitHub
SQL Injection in Pimcore

CVE-2022-1339

Affected version: <10.3.5

Reported by:
GitHub
SQL Injection in Pimcore

CVE-2022-1219

Affected version: <10.3.5

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0911

Affected version: <=10.3.3

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0704

Affected version: <=10.3.3

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0705

Affected version: <=10.3.3

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0894

Affected version: <10.4.0

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0893

Affected version: <10.4.0

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0831

Affected version: <=10.3.2

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0832

Affected version: <=10.3.2

Reported by:
GitHub
Path traversal in pimcore

CVE-2022-0665

Affected version: <10.3.2

Reported by:
GitHub
Exposure of Sensitive Information to an Unauthorized Actor in pimcore

CVE-2022-0565

Affected version: <10.3.1

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0509

Affected version: <=10.3.0

Reported by:
GitHub
Cross-site Scripting pimcore

CVE-2022-0510

Affected version: <=10.3.0

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0348

Affected version: <=10.2.9

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0251

Affected version: <10.2.10

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0260

Affected version: <10.2.9

Reported by:
GitHub
Business Logic Errors in pimcore

CVE-2021-4146

Affected version: <10.2.9

Reported by:
GitHub
pimcore is vulnerable to Cross-site Scripting

CVE-2022-0257

Affected version: <10.2.9

Reported by:
GitHub
pimcore is vulnerable to SQL Injection

CVE-2022-0258

Affected version: <10.2.9

Reported by:
GitHub
pimcore is vulnerable to Cross-site Scripting

CVE-2022-0256

Affected version: <10.2.9

Reported by:
GitHub
Unrestricted Upload of File with Dangerous Type in pimcore

CVE-2022-0263

Affected version: <10.2.7

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0262

Affected version: <10.2.7

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0285

Affected version: <10.2.9

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2021-4139

Affected version: <10.2.7

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2021-4084

Affected version: <10.2.6

Reported by:
GitHub
pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

CVE-2021-4082

Affected version: <10.2.6

Reported by:
GitHub
pimcore is vulnerable to Cross-site Scripting

CVE-2021-4081

Affected version: <10.2.6

Reported by:
GitHub
Observable Response Discrepancy in Lost Password Service

CVE-2021-39189

Affected version: <10.1.3

Reported by:
GitHub
Improper Neutralization of Text-Values in Object Version Preview

CVE-2021-39166

Affected version: <10.1.1

Reported by:
GitHub
Improper Encoding or Escaping of Output in Asset Metadata Component

CVE-2021-39170

Affected version: <10.1.1

Reported by:
GitHub
Improper Neutralization of Formula Elements in a CSV File in pimcore/pimcore

CVE-2021-37702

Affected version: <10.1.1

Reported by:
GitHub
CKEditor 4 vulnerabilities in versions <4.16.1

Affected version: <10.1.1

Reported by:
GitHub
SQL injection in pimcore/pimcore

CVE-2021-23405

Affected version: <10.0.7

Reported by:
GitHub
SQL Injection in pimcore

CVE-2020-7759

Affected version: >=6.7.2,<6.8.3

Reported by:
GitHub
Path traversal in pimcore/pimcore

CVE-2021-23340

Affected version: <6.8.8

Reported by:
GitHub