Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/pimcore/pimcore@5.6.5
Typecomposer
Namespacepimcore
Namepimcore
Version5.6.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version6.3.0
Latest_non_vulnerable_version12.3.7
Affected_by_vulnerabilities
0
url VCID-6ph4-dkvv-eybx
vulnerability_id VCID-6ph4-dkvv-eybx
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-18985
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00664
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-18985
1
reference_url https://github.com/pimcore/pimcore/commit/9f2d075243a8392c114d9a8028858b9faf041e2d
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/9f2d075243a8392c114d9a8028858b9faf041e2d
2
reference_url https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-18985
reference_id CVE-2019-18985
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-18985
fixed_packages
0
url pkg:composer/pimcore/pimcore@6.2.2
purl pkg:composer/pimcore/pimcore@6.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tpk1-5fw2-pfgc
1
vulnerability VCID-uegk-91nv-8be9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@6.2.2
aliases CVE-2019-18985, GHSA-hf62-5vxh-jpwj
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6ph4-dkvv-eybx
1
url VCID-d6ep-hreb-gqfg
vulnerability_id VCID-d6ep-hreb-gqfg
summary 
Deserialization of Untrusted Data
An attacker with classes permission can send a POST request to `/admin/class/bulk-commit`, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to `bundles/AdminBundle/Controller/Admin/DataObject/ClassController.php`.
references
0
reference_url http://packetstormsecurity.com/files/152667/Pimcore-Unserialize-Remote-Code-Execution.html
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://packetstormsecurity.com/files/152667/Pimcore-Unserialize-Remote-Code-Execution.html
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10867
reference_id
reference_type
scores
0
value 0.52728
scoring_system epss
scoring_elements 0.97992
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10867
2
reference_url https://blog.certimetergroup.com/it/articolo/security/polyglot_phar_deserialization_to_rce
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://blog.certimetergroup.com/it/articolo/security/polyglot_phar_deserialization_to_rce
3
reference_url https://github.com/pimcore/pimcore
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore
4
reference_url https://github.com/pimcore/pimcore/commit/38a29e2f4f5f060a73974626952501cee05fda73
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/38a29e2f4f5f060a73974626952501cee05fda73
5
reference_url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-173998
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-173998
6
reference_url https://www.exploit-db.com/exploits/46783
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://www.exploit-db.com/exploits/46783
7
reference_url https://www.exploit-db.com/exploits/46783/
reference_id
reference_type
scores
url https://www.exploit-db.com/exploits/46783/
8
reference_url http://www.rapid7.com/db/modules/exploit/multi/http/pimcore_unserialize_rce
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.rapid7.com/db/modules/exploit/multi/http/pimcore_unserialize_rce
9
reference_url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/remote/46783.rb
reference_id CVE-2019-10867
reference_type exploit
scores
url https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/php/remote/46783.rb
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10867
reference_id CVE-2019-10867
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10867
11
reference_url https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/pimcore_unserialize_rce.rb
reference_id CVE-2019-10867
reference_type exploit
scores
url https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/pimcore_unserialize_rce.rb
12
reference_url https://github.com/advisories/GHSA-7hqr-j26m-gmwp
reference_id GHSA-7hqr-j26m-gmwp
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-7hqr-j26m-gmwp
fixed_packages
0
url pkg:composer/pimcore/pimcore@5.7.1
purl pkg:composer/pimcore/pimcore@5.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ph4-dkvv-eybx
1
vulnerability VCID-fb1z-259v-g7hp
2
vulnerability VCID-sccv-pzyk-cka7
3
vulnerability VCID-tpk1-5fw2-pfgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@5.7.1
aliases CVE-2019-10867, GHSA-7hqr-j26m-gmwp
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d6ep-hreb-gqfg
2
url VCID-fb1z-259v-g7hp
vulnerability_id VCID-fb1z-259v-g7hp
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-18986
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00783
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-18986
1
reference_url https://github.com/pimcore/pimcore
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore
2
reference_url https://github.com/pimcore/pimcore/commit/4a7bba5c3f818852cbbd29fa124f7fb09a207185
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/4a7bba5c3f818852cbbd29fa124f7fb09a207185
3
reference_url https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-18986
reference_id CVE-2019-18986
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-18986
fixed_packages
0
url pkg:composer/pimcore/pimcore@6.2.2
purl pkg:composer/pimcore/pimcore@6.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tpk1-5fw2-pfgc
1
vulnerability VCID-uegk-91nv-8be9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@6.2.2
aliases CVE-2019-18986, GHSA-8889-9g3f-73rj
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fb1z-259v-g7hp
3
url VCID-m455-2tct-dugb
vulnerability_id VCID-m455-2tct-dugb
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-16317
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01505
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-16317
1
reference_url https://github.com/pimcore/pimcore/commit/6ee5d8536d0802e377594cbe39083e822710aab9
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6ee5d8536d0802e377594cbe39083e822710aab9
2
reference_url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-451599
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-451599
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-16317
reference_id CVE-2019-16317
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-16317
fixed_packages
0
url pkg:composer/pimcore/pimcore@5.7.1
purl pkg:composer/pimcore/pimcore@5.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ph4-dkvv-eybx
1
vulnerability VCID-fb1z-259v-g7hp
2
vulnerability VCID-sccv-pzyk-cka7
3
vulnerability VCID-tpk1-5fw2-pfgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@5.7.1
aliases CVE-2019-16317, GHSA-352x-hc2f-fwff
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-m455-2tct-dugb
4
url VCID-sccv-pzyk-cka7
vulnerability_id VCID-sccv-pzyk-cka7
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-18981
reference_id
reference_type
scores
0
value 9e-05
scoring_system epss
scoring_elements 0.00882
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-18981
1
reference_url https://github.com/pimcore/pimcore
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore
2
reference_url https://github.com/pimcore/pimcore/commit/0a5d80b2593b2ebe35d19756b730ba33aa049106
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/0a5d80b2593b2ebe35d19756b730ba33aa049106
3
reference_url https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-18981
reference_id CVE-2019-18981
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-18981
fixed_packages
0
url pkg:composer/pimcore/pimcore@6.2.2
purl pkg:composer/pimcore/pimcore@6.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-tpk1-5fw2-pfgc
1
vulnerability VCID-uegk-91nv-8be9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@6.2.2
aliases CVE-2019-18981, GHSA-jhcf-j4hg-v64r
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sccv-pzyk-cka7
5
url VCID-tpk1-5fw2-pfgc
vulnerability_id VCID-tpk1-5fw2-pfgc
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-10763
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00725
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-10763
1
reference_url https://blog.certimetergroup.com/it/articolo/security/sql_injection_in_pimcore_6.2.3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://blog.certimetergroup.com/it/articolo/security/sql_injection_in_pimcore_6.2.3
2
reference_url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-480391
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-480391
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-10763
reference_id CVE-2019-10763
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-10763
4
reference_url https://github.com/advisories/GHSA-fpff-384j-vxq7
reference_id GHSA-fpff-384j-vxq7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fpff-384j-vxq7
fixed_packages
0
url pkg:composer/pimcore/pimcore@6.3.0
purl pkg:composer/pimcore/pimcore@6.3.0
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@6.3.0
aliases CVE-2019-10763, GHSA-fpff-384j-vxq7
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tpk1-5fw2-pfgc
6
url VCID-z739-9aw2-83gp
vulnerability_id VCID-z739-9aw2-83gp
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-16318
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00826
published_at 2026-05-30T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-16318
1
reference_url https://github.com/pimcore/pimcore
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore
2
reference_url https://github.com/pimcore/pimcore/commit/732f1647cc6e0a29b5b1f5d904b4d726b5e9455f
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/732f1647cc6e0a29b5b1f5d904b4d726b5e9455f
3
reference_url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-451598
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-451598
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-16318
reference_id CVE-2019-16318
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-16318
fixed_packages
0
url pkg:composer/pimcore/pimcore@5.7.1
purl pkg:composer/pimcore/pimcore@5.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6ph4-dkvv-eybx
1
vulnerability VCID-fb1z-259v-g7hp
2
vulnerability VCID-sccv-pzyk-cka7
3
vulnerability VCID-tpk1-5fw2-pfgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@5.7.1
aliases CVE-2019-16318, GHSA-cxj7-4jpj-2q38
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-z739-9aw2-83gp
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@5.6.5