Security Advisories - pimcore/pimcore

pimcore/pimcore Security Advisories for v10.2.0 (32)

Pimcore vulnerable to cross site scripting

CVE-2022-3255

Affected version: <=10.5.6

Reported by:
GitHub
Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users

CVE-2022-3211

Affected version: <10.5.6

Reported by:
GitHub
Improper quoting of columns when using setOrderBy() or setGroupBy() on listing classes in Pimcore

CVE-2022-31092

Affected version: <10.4.4

Reported by:
GitHub
SQL Injection found in Pimcore

CVE-2022-1429

Affected version: <10.3.6

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-1351

Affected version: <10.4

Reported by:
GitHub
SQL Injection in Pimcore

CVE-2022-1339

Affected version: <10.3.5

Reported by:
GitHub
SQL Injection in Pimcore

CVE-2022-1219

Affected version: <10.3.5

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0911

Affected version: <=10.3.3

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0704

Affected version: <=10.3.3

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0705

Affected version: <=10.3.3

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0894

Affected version: <10.4.0

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0893

Affected version: <10.4.0

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0831

Affected version: <=10.3.2

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0832

Affected version: <=10.3.2

Reported by:
GitHub
Path traversal in pimcore

CVE-2022-0665

Affected version: <10.3.2

Reported by:
GitHub
Exposure of Sensitive Information to an Unauthorized Actor in pimcore

CVE-2022-0565

Affected version: <10.3.1

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0509

Affected version: <=10.3.0

Reported by:
GitHub
Cross-site Scripting pimcore

CVE-2022-0510

Affected version: <=10.3.0

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0348

Affected version: <=10.2.9

Reported by:
GitHub
Cross-site Scripting in Pimcore

CVE-2022-0251

Affected version: <10.2.10

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0260

Affected version: <10.2.9

Reported by:
GitHub
Business Logic Errors in pimcore

CVE-2021-4146

Affected version: <10.2.9

Reported by:
GitHub
pimcore is vulnerable to Cross-site Scripting

CVE-2022-0257

Affected version: <10.2.9

Reported by:
GitHub
pimcore is vulnerable to SQL Injection

CVE-2022-0258

Affected version: <10.2.9

Reported by:
GitHub
pimcore is vulnerable to Cross-site Scripting

CVE-2022-0256

Affected version: <10.2.9

Reported by:
GitHub
Unrestricted Upload of File with Dangerous Type in pimcore

CVE-2022-0263

Affected version: <10.2.7

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0262

Affected version: <10.2.7

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2022-0285

Affected version: <10.2.9

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2021-4139

Affected version: <10.2.7

Reported by:
GitHub
Cross-site Scripting in pimcore

CVE-2021-4084

Affected version: <10.2.6

Reported by:
GitHub
pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

CVE-2021-4082

Affected version: <10.2.6

Reported by:
GitHub
pimcore is vulnerable to Cross-site Scripting

CVE-2021-4081

Affected version: <10.2.6

Reported by:
GitHub