PT-2023-16837 · Pimcore · Pimcore

Published 2023-03-07 · Updated 2023-03-27 · CVE-2023-1247

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions pimcore/pimcore versions prior to 11.0.0

Description The issue is related to Cross-site Scripting (XSS) - Reflected. This is a security concern where an attacker can inject malicious scripts into a website, potentially leading to unauthorized actions.

Recommendations For versions prior to 11.0.0, update to version 11.0.0 or later to resolve the issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2023-1247

GHSA-8WG7-88CG-7P9J

Affected Products

Pimcore

References · 7

• 🔥 https://huntr.dev/bounties/04447124-c7d4-477f-8364-91fe5b59cda0 · Exploit
• https://osv.dev/vulnerability/GHSA-8wg7-88cg-7p9j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-1247 · Security Note
• https://github.com/pimcore/pimcore · Note
• https://github.com/pimcore/pimcore/commit/da2af2d413b144b9a742118124457d13232d31fd · Note
• https://t.me/cibsecurity/59552 · Telegram Post
• https://t.me/cvenotify/45710 · Telegram Post