[MEDIUM] Pimcore has a WordExport Authorization Bypass for Unauthorized Document Export

PKSA-v5bg-33q7-q8zj CVE-2026-45703 GHSA-332x-r494-54fq

Affected package: pimcore/pimcore

Affected version: >=2026.1.0,<2026.1.3|<=11.5.16|>=12.0.0-RC1,<=12.3.6

Reported by:
GitHub