[HIGH] Pimcore: Missing Authorization in WebDAV MOVE via unchecked asset move handling

PKSA-y4yc-6g1b-qfqz CVE-2026-45260 GHSA-wc7j-g8wx-m2qx

Affected package: pimcore/pimcore

Affected version: <=11.5.16|>=2026.1.0,<2026.1.3|>=12.0.0-RC1,<=12.3.6

Reported by:
GitHub