PT-2023-33062 · Pimcore · Pimcore

Published 2023-03-16 · Updated 2023-03-16

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 10.5.19

Description The issue allows for stored XSS, which can lead to the theft of cookies and other information of other users.

Recommendations For versions prior to 10.5.19, update to version 10.5.19 or apply the patch manually from https://github.com/pimcore/pimcore/pull/14560.patch. As a temporary workaround, consider applying the patch from https://github.com/pimcore/pimcore/pull/14560.patch manually until the official update is applied.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

GHSA-RRWM-8WQM-GWGV

Affected Products

Pimcore

References · 3

• https://osv.dev/vulnerability/GHSA-rrwm-8wqm-gwgv · Vendor Advisory
• https://github.com/pimcore/pimcore · Note
• https://github.com/pimcore/pimcore/security/advisories/GHSA-rrwm-8wqm-gwgv · Note