PT-2023-33062 · Pimcore · Pimcore

Publicado 2023-03-16 · Atualizado 2023-03-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 10.5.19

Description The issue allows for stored XSS, which can lead to the theft of cookies and other information of other users.

Recommendations For versions prior to 10.5.19, update to version 10.5.19 or apply the patch manually from https://github.com/pimcore/pimcore/pull/14560.patch. As a temporary workaround, consider applying the patch from https://github.com/pimcore/pimcore/pull/14560.patch manually until the official update is applied.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

GHSA-RRWM-8WQM-GWGV

Produtos afetados

Pimcore

Referências · 3

• https://github.com/pimcore/pimcore · Nota
• https://github.com/pimcore/pimcore/security/advisories/GHSA-rrwm-8wqm-gwgv · Nota
• https://osv.dev/vulnerability/GHSA-rrwm-8wqm-gwgv · Aviso do Fabricante