Vulnerabilidades en Pimcore
149 resultadosCVE-2023-28108HIGHPimcore has improper quoting of columns when calling methods "getByUuid" & "exists" on UUID ModelEPSS 0.9%CVE-2023-2984MEDIUMPath Traversal: '\..\filename' in pimcore/pimcoreEPSS 0.9%CVE-2024-23648HIGHPimcore Admin Classic Bundle host header injection in the password resetEPSS 0.8%CVE-2020-26246HIGHAuthorization bypass in PimcoreEPSS 0.8%CVE-2022-0893MEDIUMCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.8%CVE-2022-1351MEDIUMStored XSS in Tooltip in pimcore/pimcoreEPSS 0.8%CVE-2022-3255MEDIUMCross-site Scripting (XSS) - Reflected in pimcore/pimcoreEPSS 0.8%CVE-2022-0911MEDIUMCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.8%CVE-2021-4146MEDIUMBusiness Logic Errors in pimcore/pimcoreEPSS 0.8%CVE-2023-30855MEDIUMPimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.phpEPSS 0.8%CVE-2023-30849HIGHPimcore vulnerable to SQL Injection in Translation Export APIEPSS 0.8%CVE-2023-30850HIGHPimcore SQL Injection Vulnerability in Admin Translations APIEPSS 0.8%CVE-2021-39166HIGHImproper Neutralization of Text-Values in Object Version PreviewEPSS 0.8%CVE-2021-4081MEDIUMCross-site Scripting (XSS) - Reflected in pimcore/pimcoreEPSS 0.8%CVE-2024-32871HIGHPimcore Vulnerable to Flooding Server with Thumbnail filesEPSS 0.8%CVE-2023-32075MEDIUMPimcore vulnerable to Business Logic Errors in Customer automation rulesEPSS 0.8%CVE-2023-30848HIGHPimcore SQL Injection Vulnerability in Admin Search Find APIEPSS 0.7%CVE-2024-29197MEDIUMPimcore Preview Documents are not restricted to logged in users anymoreEPSS 0.7%CVE-2022-0251HIGHCross-site Scripting (XSS) - Stored in pimcore/pimcoreEPSS 0.7%CVE-2023-28106MEDIUMPimcore vulnerable to Cross-site Scripting in UrlSlug Data typeEPSS 0.7%