Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/pimcore/pimcore@10.5.4
Typecomposer
Namespacepimcore
Namepimcore
Version10.5.4
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version12.3.4
Latest_non_vulnerable_version12.3.7
Affected_by_vulnerabilities
0
url VCID-16vs-u1gr-g3ch
vulnerability_id VCID-16vs-u1gr-g3ch
summary If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can: Perform any action within the application that the user can perform. View any information that the user is able to view. Modify any information that the user is able to modify. Initiate interactions with other application users, including malicious attacks, that will appear to originate from the initial victim user.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-3255
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01465
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-3255
1
reference_url https://huntr.dev/bounties/0ea45cf9-b256-454c-9031-2435294c0902
reference_id 0ea45cf9-b256-454c-9031-2435294c0902
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-05-28T15:21:24Z/
url https://huntr.dev/bounties/0ea45cf9-b256-454c-9031-2435294c0902
2
reference_url https://github.com/pimcore/pimcore/commit/1e916e7d668c9e47b217e20cc0ea4812f466201b
reference_id 1e916e7d668c9e47b217e20cc0ea4812f466201b
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-05-28T15:21:24Z/
url https://github.com/pimcore/pimcore/commit/1e916e7d668c9e47b217e20cc0ea4812f466201b
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-3255
reference_id CVE-2022-3255
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-3255
4
reference_url https://github.com/advisories/GHSA-wqr6-57qm-hhr5
reference_id GHSA-wqr6-57qm-hhr5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wqr6-57qm-hhr5
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.7
purl pkg:composer/pimcore/pimcore@10.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-2n5e-7xn6-4ubt
3
vulnerability VCID-35c5-mzwz-8bgw
4
vulnerability VCID-3b57-hrf9-z3e2
5
vulnerability VCID-3hs9-ywbk-rbdy
6
vulnerability VCID-3q4h-tcnp-7qa1
7
vulnerability VCID-4ar7-yac3-fkf7
8
vulnerability VCID-4jxn-m7de-5yay
9
vulnerability VCID-4n7p-vgv2-2qc3
10
vulnerability VCID-4tqk-ragu-h7ce
11
vulnerability VCID-6286-wv98-9uht
12
vulnerability VCID-6fw4-9qqw-bqen
13
vulnerability VCID-6uw7-89nn-tkg3
14
vulnerability VCID-7191-wmtq-7fdg
15
vulnerability VCID-79ph-2nu8-4bhf
16
vulnerability VCID-7rvk-x76k-rkex
17
vulnerability VCID-843n-ga86-syg7
18
vulnerability VCID-8d6u-y4zg-7bbq
19
vulnerability VCID-8jqk-yf3u-a3gn
20
vulnerability VCID-9d5s-3c9u-c7gg
21
vulnerability VCID-a9r6-chrk-9ffe
22
vulnerability VCID-afta-wcuy-4kah
23
vulnerability VCID-b4ba-atzn-wkay
24
vulnerability VCID-cbz2-sxrt-rffn
25
vulnerability VCID-e793-c5wh-yuaf
26
vulnerability VCID-em5a-b39y-6qgc
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-ha34-7pm3-pqgm
29
vulnerability VCID-hdnj-vcx7-e7cw
30
vulnerability VCID-hjs3-9b5k-e7c4
31
vulnerability VCID-hsfu-wneb-1kb3
32
vulnerability VCID-j76y-vhb3-4kc8
33
vulnerability VCID-kq1j-jfjz-7yb2
34
vulnerability VCID-mmg6-qgw8-uffr
35
vulnerability VCID-mwcv-7yze-jyfe
36
vulnerability VCID-nsv2-svcf-83f1
37
vulnerability VCID-nyrx-zsbe-23g8
38
vulnerability VCID-p5rs-jqqj-dudg
39
vulnerability VCID-puqv-p29k-6bhv
40
vulnerability VCID-pvq6-vk11-6qdp
41
vulnerability VCID-pvqw-sqms-aqg6
42
vulnerability VCID-pxg6-wvup-gkhb
43
vulnerability VCID-r243-r7yh-93d1
44
vulnerability VCID-rq96-5ke4-kqcd
45
vulnerability VCID-rxn9-7h5z-pyfm
46
vulnerability VCID-sycr-3zm4-n7hm
47
vulnerability VCID-tcfq-uejs-nqbz
48
vulnerability VCID-tpw6-n6zr-tkcc
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-vgqm-xjtk-yffe
53
vulnerability VCID-xrdb-kuj9-yffv
54
vulnerability VCID-xxfx-xxax-g3g2
55
vulnerability VCID-ygzv-hrfh-47gr
56
vulnerability VCID-ypv8-jnky-vkc4
57
vulnerability VCID-zgrb-9ta2-pqgu
58
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.7
aliases CVE-2022-3255, GHSA-wqr6-57qm-hhr5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-16vs-u1gr-g3ch
1
url VCID-1ghg-916g-5ycf
vulnerability_id VCID-1ghg-916g-5ycf
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28108
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03387
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28108
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28108
reference_id
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28108
2
reference_url https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch
reference_id 08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:29:15Z/
url https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch
3
reference_url https://github.com/pimcore/pimcore/pull/14633
reference_id 14633
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:29:15Z/
url https://github.com/pimcore/pimcore/pull/14633
4
reference_url https://github.com/advisories/GHSA-xc9p-r5qj-8xm9
reference_id GHSA-xc9p-r5qj-8xm9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xc9p-r5qj-8xm9
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9
reference_id GHSA-xc9p-r5qj-8xm9
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:29:15Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28108, GHSA-xc9p-r5qj-8xm9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ghg-916g-5ycf
2
url VCID-2dhw-5ft3-4udh
vulnerability_id VCID-2dhw-5ft3-4udh
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2615
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01352
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2615
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-q7cc-m6jw-m262
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-q7cc-m6jw-m262
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2615
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2615
3
reference_url https://github.com/pimcore/pimcore/commit/7a799399e6843cd049e85da27ceb75b78505317f
reference_id 7a799399e6843cd049e85da27ceb75b78505317f
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:41:26Z/
url https://github.com/pimcore/pimcore/commit/7a799399e6843cd049e85da27ceb75b78505317f
4
reference_url https://huntr.dev/bounties/af9c360a-87f8-4e97-a24b-6db675ee942a
reference_id af9c360a-87f8-4e97-a24b-6db675ee942a
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:41:26Z/
url https://huntr.dev/bounties/af9c360a-87f8-4e97-a24b-6db675ee942a
5
reference_url https://github.com/advisories/GHSA-q7cc-m6jw-m262
reference_id GHSA-q7cc-m6jw-m262
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q7cc-m6jw-m262
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2615, GHSA-q7cc-m6jw-m262
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2dhw-5ft3-4udh
3
url VCID-2n5e-7xn6-4ubt
vulnerability_id VCID-2n5e-7xn6-4ubt
summary RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-39365
reference_id
reference_type
scores
0
value 0.00205
scoring_system epss
scoring_elements 0.42691
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-39365
1
reference_url https://github.com/pimcore/pimcore/commit/43aa34e018f5cd447bceb864358285ba92f68372
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/43aa34e018f5cd447bceb864358285ba92f68372
2
reference_url https://github.com/pimcore/pimcore/pull/13347
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13347
3
reference_url https://github.com/pimcore/pimcore/pull/13347.patch
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13347.patch
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-39365
reference_id CVE-2022-39365
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-39365
5
reference_url https://github.com/advisories/GHSA-5qxq-vgmm-q39m
reference_id GHSA-5qxq-vgmm-q39m
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5qxq-vgmm-q39m
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-5qxq-vgmm-q39m
reference_id GHSA-5qxq-vgmm-q39m
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-5qxq-vgmm-q39m
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.9
purl pkg:composer/pimcore/pimcore@10.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-79ph-2nu8-4bhf
15
vulnerability VCID-7rvk-x76k-rkex
16
vulnerability VCID-843n-ga86-syg7
17
vulnerability VCID-8d6u-y4zg-7bbq
18
vulnerability VCID-8jqk-yf3u-a3gn
19
vulnerability VCID-9d5s-3c9u-c7gg
20
vulnerability VCID-a9r6-chrk-9ffe
21
vulnerability VCID-afta-wcuy-4kah
22
vulnerability VCID-b4ba-atzn-wkay
23
vulnerability VCID-cbz2-sxrt-rffn
24
vulnerability VCID-e793-c5wh-yuaf
25
vulnerability VCID-em5a-b39y-6qgc
26
vulnerability VCID-fcm6-y2yu-2uca
27
vulnerability VCID-ha34-7pm3-pqgm
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u34s-hhf3-uyfy
49
vulnerability VCID-uct4-qg7n-fuh1
50
vulnerability VCID-usku-z4hw-23dn
51
vulnerability VCID-vgqm-xjtk-yffe
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.9
aliases CVE-2022-39365, GHSA-5qxq-vgmm-q39m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2n5e-7xn6-4ubt
4
url VCID-35c5-mzwz-8bgw
vulnerability_id VCID-35c5-mzwz-8bgw
summary 
Withdrawn Advisory: Pimcore vulnerable to Cross-site Scripting
## Withdrawn Advisory
This advisory has been withdrawn because the maintainers no longer consider this to be a security issue. This link is maintained to preserve external references.

## Original Description
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 11.0.0.
references
0
reference_url https://github.com/pimcore/pimcore/commit/da2af2d413b144b9a742118124457d13232d31fd
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/da2af2d413b144b9a742118124457d13232d31fd
1
reference_url https://huntr.dev/bounties/04447124-c7d4-477f-8364-91fe5b59cda0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/04447124-c7d4-477f-8364-91fe5b59cda0
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1247
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1247
3
reference_url https://github.com/advisories/GHSA-8wg7-88cg-7p9j
reference_id GHSA-8wg7-88cg-7p9j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8wg7-88cg-7p9j
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.0.0
purl pkg:composer/pimcore/pimcore@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-cbz2-sxrt-rffn
3
vulnerability VCID-em5a-b39y-6qgc
4
vulnerability VCID-ha34-7pm3-pqgm
5
vulnerability VCID-p5rs-jqqj-dudg
6
vulnerability VCID-phk5-1sq4-t3gn
7
vulnerability VCID-vgqm-xjtk-yffe
8
vulnerability VCID-wvt7-h158-8kc9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0
aliases CVE-2023-1247, GHSA-8wg7-88cg-7p9j
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-35c5-mzwz-8bgw
5
url VCID-3b57-hrf9-z3e2
vulnerability_id VCID-3b57-hrf9-z3e2
summary Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2341
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04365
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2341
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-fq95-rx4q-qgg2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-fq95-rx4q-qgg2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2341
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2341
3
reference_url https://github.com/pimcore/pimcore/commit/66f1089fb1b9bcd575bfce9b1d4abb0f0499df11
reference_id 66f1089fb1b9bcd575bfce9b1d4abb0f0499df11
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:03Z/
url https://github.com/pimcore/pimcore/commit/66f1089fb1b9bcd575bfce9b1d4abb0f0499df11
4
reference_url https://huntr.dev/bounties/cf3901ac-a649-478f-ab08-094ef759c11d
reference_id cf3901ac-a649-478f-ab08-094ef759c11d
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:03Z/
url https://huntr.dev/bounties/cf3901ac-a649-478f-ab08-094ef759c11d
5
reference_url https://github.com/advisories/GHSA-fq95-rx4q-qgg2
reference_id GHSA-fq95-rx4q-qgg2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-fq95-rx4q-qgg2
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2341, GHSA-fq95-rx4q-qgg2
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3b57-hrf9-z3e2
6
url VCID-3hs9-ywbk-rbdy
vulnerability_id VCID-3hs9-ywbk-rbdy
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2342
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02081
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2342
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-2c67-p4xh-m34w
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-2c67-p4xh-m34w
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2342
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2342
3
reference_url https://huntr.dev/bounties/01cd3ed5-dce8-4021-9de0-81cb14bf1829
reference_id 01cd3ed5-dce8-4021-9de0-81cb14bf1829
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:31:26Z/
url https://huntr.dev/bounties/01cd3ed5-dce8-4021-9de0-81cb14bf1829
4
reference_url https://github.com/pimcore/pimcore/commit/42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564
reference_id 42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:31:26Z/
url https://github.com/pimcore/pimcore/commit/42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564
5
reference_url https://github.com/advisories/GHSA-2c67-p4xh-m34w
reference_id GHSA-2c67-p4xh-m34w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2c67-p4xh-m34w
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2342, GHSA-2c67-p4xh-m34w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3hs9-ywbk-rbdy
7
url VCID-3q4h-tcnp-7qa1
vulnerability_id VCID-3q4h-tcnp-7qa1
summary 
Reflected XSS in Application Logger module
### Impact
This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites.

### Patches
Update to version 10.5.19 or apply this patch manually https://github.com/pimcore/pimcore/pull/14606.patch

### Workarounds
Apply https://github.com/pimcore/pimcore/pull/14606.patch manually.

### References
https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356/
references
0
reference_url https://github.com/pimcore/pimcore/pull/14606
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14606
1
reference_url https://github.com/pimcore/pimcore/pull/14606.patch
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14606.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-2xpm-cmvw-3jcc
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-2xpm-cmvw-3jcc
3
reference_url https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356/
reference_id
reference_type
scores
url https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356/
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
5
reference_url https://github.com/advisories/GHSA-2xpm-cmvw-3jcc
reference_id GHSA-2xpm-cmvw-3jcc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2xpm-cmvw-3jcc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases GHSA-2xpm-cmvw-3jcc, GMS-2023-779
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3q4h-tcnp-7qa1
8
url VCID-4ar7-yac3-fkf7
vulnerability_id VCID-4ar7-yac3-fkf7
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3821
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00386
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3821
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3821
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3821
2
reference_url https://huntr.dev/bounties/599ba4f6-c900-4161-9127-f1e6a6e29aaa
reference_id 599ba4f6-c900-4161-9127-f1e6a6e29aaa
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:28:26Z/
url https://huntr.dev/bounties/599ba4f6-c900-4161-9127-f1e6a6e29aaa
3
reference_url https://github.com/pimcore/pimcore/commit/92811f07d39e4ad95c92003868f5f7309489d79c
reference_id 92811f07d39e4ad95c92003868f5f7309489d79c
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:28:26Z/
url https://github.com/pimcore/pimcore/commit/92811f07d39e4ad95c92003868f5f7309489d79c
4
reference_url https://github.com/advisories/GHSA-78q2-cv3p-x9fm
reference_id GHSA-78q2-cv3p-x9fm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-78q2-cv3p-x9fm
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-cbz2-sxrt-rffn
3
vulnerability VCID-em5a-b39y-6qgc
4
vulnerability VCID-ha34-7pm3-pqgm
5
vulnerability VCID-hjs3-9b5k-e7c4
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-vgqm-xjtk-yffe
8
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3821, GHSA-78q2-cv3p-x9fm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4ar7-yac3-fkf7
9
url VCID-4jxn-m7de-5yay
vulnerability_id VCID-4jxn-m7de-5yay
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin translations API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30850
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.20229
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30850
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30850
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30850
2
reference_url https://github.com/pimcore/pimcore/pull/14952
reference_id 14952
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-30T21:12:49Z/
url https://github.com/pimcore/pimcore/pull/14952
3
reference_url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
reference_id 7e32cc28145274ddfc30fb791012d26c1278bd38.patch
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-30T21:12:49Z/
url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
4
reference_url https://github.com/advisories/GHSA-jwg4-qcgv-5wg6
reference_id GHSA-jwg4-qcgv-5wg6
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-jwg4-qcgv-5wg6
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-jwg4-qcgv-5wg6
reference_id GHSA-jwg4-qcgv-5wg6
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-30T21:12:49Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-jwg4-qcgv-5wg6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30850, GHSA-jwg4-qcgv-5wg6
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4jxn-m7de-5yay
10
url VCID-4n7p-vgv2-2qc3
vulnerability_id VCID-4n7p-vgv2-2qc3
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-proxy` API endpoint that is accessible by an authenticated administrator user is vulnerable to arbitrary JavaScript and CSS file read via the `scriptPath` and `scripts` parameters. The `scriptPath` parameter is not sanitized properly and is vulnerable to path traversal attack. Any JavaScript/CSS file from the application server can be read by specifying sufficient number of `../` patterns to go out from the application webroot followed by path of the folder where the file is located in the "scriptPath" parameter and the file name in the "scripts" parameter. The JavaScript file is successfully read only if the web application has read access to it. Users should update to version 10.5.21 to receive a patch or, as a workaround, apply the patch manual.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30852
reference_id
reference_type
scores
0
value 0.0001
scoring_system epss
scoring_elements 0.01137
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30852
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30852
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30852
2
reference_url https://github.com/pimcore/pimcore/pull/14959
reference_id 14959
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T19:34:59Z/
url https://github.com/pimcore/pimcore/pull/14959
3
reference_url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch
reference_id 498cadec2292f7842fb10612068ac78496e884b4.patch
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T19:34:59Z/
url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch
4
reference_url https://github.com/advisories/GHSA-j5c3-r84f-9596
reference_id GHSA-j5c3-r84f-9596
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j5c3-r84f-9596
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596
reference_id GHSA-j5c3-r84f-9596
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T19:34:59Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30852, GHSA-j5c3-r84f-9596
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4n7p-vgv2-2qc3
11
url VCID-4tqk-ragu-h7ce
vulnerability_id VCID-4tqk-ragu-h7ce
summary Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2614
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01352
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2614
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-m6m9-gr85-79vm
reference_id
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-m6m9-gr85-79vm
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2614
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2614
3
reference_url https://huntr.dev/bounties/1a5e6c65-2c5e-4617-9411-5b47a7e743a6
reference_id 1a5e6c65-2c5e-4617-9411-5b47a7e743a6
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:42:03Z/
url https://huntr.dev/bounties/1a5e6c65-2c5e-4617-9411-5b47a7e743a6
4
reference_url https://github.com/pimcore/pimcore/commit/c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7
reference_id c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:42:03Z/
url https://github.com/pimcore/pimcore/commit/c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7
5
reference_url https://github.com/advisories/GHSA-m6m9-gr85-79vm
reference_id GHSA-m6m9-gr85-79vm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m6m9-gr85-79vm
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2614, GHSA-m6m9-gr85-79vm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4tqk-ragu-h7ce
12
url VCID-6286-wv98-9uht
vulnerability_id VCID-6286-wv98-9uht
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write arbitrary SQL queries and given the fact that this endpoint is using the GET method (no CSRF protection), an attacker can inject an arbitrary query by manipulating a user to click on a link. Users should upgrade to version 10.5.19 to receive a patch or, as a workaround, may apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28438
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.08012
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28438
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28438
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28438
2
reference_url https://github.com/pimcore/pimcore/pull/14526
reference_id 14526
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:17Z/
url https://github.com/pimcore/pimcore/pull/14526
3
reference_url https://github.com/pimcore/pimcore/commit/d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch
reference_id d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:17Z/
url https://github.com/pimcore/pimcore/commit/d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch
4
reference_url https://github.com/advisories/GHSA-vf7q-g2pv-jxvx
reference_id GHSA-vf7q-g2pv-jxvx
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vf7q-g2pv-jxvx
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-vf7q-g2pv-jxvx
reference_id GHSA-vf7q-g2pv-jxvx
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:17Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-vf7q-g2pv-jxvx
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28438, GHSA-vf7q-g2pv-jxvx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6286-wv98-9uht
13
url VCID-6etn-5u58-sqgg
vulnerability_id VCID-6etn-5u58-sqgg
summary Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-3211
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05775
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-3211
1
reference_url https://github.com/pimcore/pimcore/commit/0508c491c6a4f3d119ec8dcf444e52ff25028c36
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/0508c491c6a4f3d119ec8dcf444e52ff25028c36
2
reference_url https://github.com/pimcore/pimcore/pull/13129
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13129
3
reference_url https://huntr.dev/bounties/31ac0506-ae38-4128-a46d-71d5d079f8b7
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/31ac0506-ae38-4128-a46d-71d5d079f8b7
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-3211
reference_id CVE-2022-3211
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-3211
5
reference_url https://github.com/advisories/GHSA-4849-x3jx-45qr
reference_id GHSA-4849-x3jx-45qr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4849-x3jx-45qr
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.6
purl pkg:composer/pimcore/pimcore@10.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6fw4-9qqw-bqen
14
vulnerability VCID-6uw7-89nn-tkg3
15
vulnerability VCID-7191-wmtq-7fdg
16
vulnerability VCID-79ph-2nu8-4bhf
17
vulnerability VCID-7rvk-x76k-rkex
18
vulnerability VCID-843n-ga86-syg7
19
vulnerability VCID-8d6u-y4zg-7bbq
20
vulnerability VCID-8jqk-yf3u-a3gn
21
vulnerability VCID-9d5s-3c9u-c7gg
22
vulnerability VCID-a9r6-chrk-9ffe
23
vulnerability VCID-afta-wcuy-4kah
24
vulnerability VCID-b4ba-atzn-wkay
25
vulnerability VCID-cbz2-sxrt-rffn
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-em5a-b39y-6qgc
28
vulnerability VCID-fcm6-y2yu-2uca
29
vulnerability VCID-ha34-7pm3-pqgm
30
vulnerability VCID-hdnj-vcx7-e7cw
31
vulnerability VCID-hjs3-9b5k-e7c4
32
vulnerability VCID-hsfu-wneb-1kb3
33
vulnerability VCID-j76y-vhb3-4kc8
34
vulnerability VCID-kq1j-jfjz-7yb2
35
vulnerability VCID-mmg6-qgw8-uffr
36
vulnerability VCID-mwcv-7yze-jyfe
37
vulnerability VCID-nsv2-svcf-83f1
38
vulnerability VCID-nyrx-zsbe-23g8
39
vulnerability VCID-p5rs-jqqj-dudg
40
vulnerability VCID-puqv-p29k-6bhv
41
vulnerability VCID-pvq6-vk11-6qdp
42
vulnerability VCID-pvqw-sqms-aqg6
43
vulnerability VCID-pxg6-wvup-gkhb
44
vulnerability VCID-r243-r7yh-93d1
45
vulnerability VCID-rq96-5ke4-kqcd
46
vulnerability VCID-rxn9-7h5z-pyfm
47
vulnerability VCID-sycr-3zm4-n7hm
48
vulnerability VCID-tcfq-uejs-nqbz
49
vulnerability VCID-tpw6-n6zr-tkcc
50
vulnerability VCID-u34s-hhf3-uyfy
51
vulnerability VCID-uct4-qg7n-fuh1
52
vulnerability VCID-usku-z4hw-23dn
53
vulnerability VCID-vgqm-xjtk-yffe
54
vulnerability VCID-xrdb-kuj9-yffv
55
vulnerability VCID-xxfx-xxax-g3g2
56
vulnerability VCID-ygzv-hrfh-47gr
57
vulnerability VCID-ypv8-jnky-vkc4
58
vulnerability VCID-zgrb-9ta2-pqgu
59
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.6
aliases CVE-2022-3211, GHSA-4849-x3jx-45qr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6etn-5u58-sqgg
14
url VCID-6fw4-9qqw-bqen
vulnerability_id VCID-6fw4-9qqw-bqen
summary Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2343
reference_id
reference_type
scores
0
value 9e-05
scoring_system epss
scoring_elements 0.01017
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2343
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-9q7q-r54q-3f3g
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-9q7q-r54q-3f3g
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2343
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2343
3
reference_url https://huntr.dev/bounties/2fa17227-a717-4b66-ab5a-16bffbb4edb2
reference_id 2fa17227-a717-4b66-ab5a-16bffbb4edb2
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:04:53Z/
url https://huntr.dev/bounties/2fa17227-a717-4b66-ab5a-16bffbb4edb2
4
reference_url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e
reference_id f1d904094700b513c4756904fa2b1e19d08d890e
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:04:53Z/
url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e
5
reference_url https://github.com/advisories/GHSA-9q7q-r54q-3f3g
reference_id GHSA-9q7q-r54q-3f3g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9q7q-r54q-3f3g
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2343, GHSA-9q7q-r54q-3f3g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6fw4-9qqw-bqen
15
url VCID-6uw7-89nn-tkg3
vulnerability_id VCID-6uw7-89nn-tkg3
summary Pimcore is an Open Source Data & Experience Management Platform. In affected versions the `/admin/object/grid-proxy` endpoint calls `getFilterCondition()` on fields of classes to be filtered for, passing input from the request, and later executes the returned SQL. One implementation of `getFilterCondition()` is in `Multiselect`, which does not normalize/escape/validate the passed value. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level. This vulnerability has been addressed in version 11.1.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-47637
reference_id
reference_type
scores
0
value 0.7657
scoring_system epss
scoring_elements 0.98967
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-47637
1
reference_url https://github.com/pimcore/pimcore/blob/42b6cfa77c4540205bdd10689893ccb73e4bac8f/models/DataObject/ClassDefinition/Data/Multiselect.php#L285-L312
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/blob/42b6cfa77c4540205bdd10689893ccb73e4bac8f/models/DataObject/ClassDefinition/Data/Multiselect.php#L285-L312
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-47637
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-47637
3
reference_url https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0
reference_id d164d99c90f098d0ccd6b72929c48b727e2953a0
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T17:40:14Z/
url https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0
4
reference_url https://github.com/advisories/GHSA-72hh-xf79-429p
reference_id GHSA-72hh-xf79-429p
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-72hh-xf79-429p
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p
reference_id GHSA-72hh-xf79-429p
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T17:40:14Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p
6
reference_url https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311
reference_id GridHelperService.php#L311
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T17:40:14Z/
url https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.1.1
purl pkg:composer/pimcore/pimcore@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2b8z-rbsm-1fbp
1
vulnerability VCID-cbz2-sxrt-rffn
2
vulnerability VCID-em5a-b39y-6qgc
3
vulnerability VCID-ha34-7pm3-pqgm
4
vulnerability VCID-p5rs-jqqj-dudg
5
vulnerability VCID-phk5-1sq4-t3gn
6
vulnerability VCID-vgqm-xjtk-yffe
7
vulnerability VCID-wvt7-h158-8kc9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.1.1
aliases CVE-2023-47637, GHSA-72hh-xf79-429p
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6uw7-89nn-tkg3
16
url VCID-7191-wmtq-7fdg
vulnerability_id VCID-7191-wmtq-7fdg
summary Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2336
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01587
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2336
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-hg77-vx9v-f49x
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-hg77-vx9v-f49x
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2336
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2336
3
reference_url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4
reference_id 498cadec2292f7842fb10612068ac78496e884b4
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:58Z/
url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4
4
reference_url https://huntr.dev/bounties/af764624-7746-4f53-8480-85348dbb4f14
reference_id af764624-7746-4f53-8480-85348dbb4f14
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:58Z/
url https://huntr.dev/bounties/af764624-7746-4f53-8480-85348dbb4f14
5
reference_url https://github.com/advisories/GHSA-hg77-vx9v-f49x
reference_id GHSA-hg77-vx9v-f49x
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-hg77-vx9v-f49x
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2336, GHSA-hg77-vx9v-f49x
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7191-wmtq-7fdg
17
url VCID-79ph-2nu8-4bhf
vulnerability_id VCID-79ph-2nu8-4bhf
summary 
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
### Impact
An attacker can use XSS to send a malicious script to an unsuspecting user.

### Patches
Update to version 10.5.17 or apply this patch manually https://github.com/pimcore/pimcore/pull/14301.patch

### Workarounds
Apply https://github.com/pimcore/pimcore/pull/14301.patch manually.

### References
https://huntr.dev/bounties/75bc7d07-46a7-4ed9-a405-af4fc47fb422/
references
0
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-76r7-h46w-463r
reference_id
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-76r7-h46w-463r
1
reference_url https://github.com/advisories/GHSA-76r7-h46w-463r
reference_id GHSA-76r7-h46w-463r
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-76r7-h46w-463r
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.17
purl pkg:composer/pimcore/pimcore@10.5.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8d6u-y4zg-7bbq
17
vulnerability VCID-8jqk-yf3u-a3gn
18
vulnerability VCID-9d5s-3c9u-c7gg
19
vulnerability VCID-a9r6-chrk-9ffe
20
vulnerability VCID-afta-wcuy-4kah
21
vulnerability VCID-b4ba-atzn-wkay
22
vulnerability VCID-cbz2-sxrt-rffn
23
vulnerability VCID-e793-c5wh-yuaf
24
vulnerability VCID-em5a-b39y-6qgc
25
vulnerability VCID-fcm6-y2yu-2uca
26
vulnerability VCID-ha34-7pm3-pqgm
27
vulnerability VCID-hjs3-9b5k-e7c4
28
vulnerability VCID-hsfu-wneb-1kb3
29
vulnerability VCID-j76y-vhb3-4kc8
30
vulnerability VCID-kq1j-jfjz-7yb2
31
vulnerability VCID-mmg6-qgw8-uffr
32
vulnerability VCID-nsv2-svcf-83f1
33
vulnerability VCID-nyrx-zsbe-23g8
34
vulnerability VCID-p5rs-jqqj-dudg
35
vulnerability VCID-puqv-p29k-6bhv
36
vulnerability VCID-pvq6-vk11-6qdp
37
vulnerability VCID-pvqw-sqms-aqg6
38
vulnerability VCID-pxg6-wvup-gkhb
39
vulnerability VCID-r243-r7yh-93d1
40
vulnerability VCID-rq96-5ke4-kqcd
41
vulnerability VCID-rxn9-7h5z-pyfm
42
vulnerability VCID-sycr-3zm4-n7hm
43
vulnerability VCID-tcfq-uejs-nqbz
44
vulnerability VCID-tpw6-n6zr-tkcc
45
vulnerability VCID-u34s-hhf3-uyfy
46
vulnerability VCID-uct4-qg7n-fuh1
47
vulnerability VCID-usku-z4hw-23dn
48
vulnerability VCID-vgqm-xjtk-yffe
49
vulnerability VCID-xrdb-kuj9-yffv
50
vulnerability VCID-xxfx-xxax-g3g2
51
vulnerability VCID-ygzv-hrfh-47gr
52
vulnerability VCID-ypv8-jnky-vkc4
53
vulnerability VCID-zgrb-9ta2-pqgu
54
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.17
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases GHSA-76r7-h46w-463r, GMS-2023-363
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-79ph-2nu8-4bhf
18
url VCID-7rvk-x76k-rkex
vulnerability_id VCID-7rvk-x76k-rkex
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1515
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03918
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1515
1
reference_url https://github.com/pimcore/pimcore/pull/14562
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14562
2
reference_url https://github.com/pimcore/pimcore/pull/14562.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14562.patch
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-66cm-c7ch-5j8q
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-66cm-c7ch-5j8q
4
reference_url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282/
reference_id
reference_type
scores
url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282/
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1515
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1515
6
reference_url https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964
reference_id 44c6b37aa649a0e3105fa41f3d74a3e511acf964
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:23:15Z/
url https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964
7
reference_url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282
reference_id ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:23:15Z/
url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282
8
reference_url https://github.com/advisories/GHSA-66cm-c7ch-5j8q
reference_id GHSA-66cm-c7ch-5j8q
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-66cm-c7ch-5j8q
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1515, GHSA-66cm-c7ch-5j8q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7rvk-x76k-rkex
19
url VCID-843n-ga86-syg7
vulnerability_id VCID-843n-ga86-syg7
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1578
reference_id
reference_type
scores
0
value 0.03609
scoring_system epss
scoring_elements 0.88053
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1578
1
reference_url https://github.com/pimcore/pimcore/pull/14538
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14538
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-42c3-wvww-gcqj
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-42c3-wvww-gcqj
3
reference_url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e/
reference_id
reference_type
scores
url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e/
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1578
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1578
5
reference_url https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2
reference_id 367b74488808d71ec3f66f4ca9e8df5217c2c8d2
reference_type
scores
0
value 6.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-25T19:51:39Z/
url https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2
6
reference_url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e
reference_id 7e441a14-8e55-4ab4-932c-4dc56bb1bc2e
reference_type
scores
0
value 6.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-25T19:51:39Z/
url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e
7
reference_url https://github.com/advisories/GHSA-42c3-wvww-gcqj
reference_id GHSA-42c3-wvww-gcqj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-42c3-wvww-gcqj
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1578, GHSA-42c3-wvww-gcqj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-843n-ga86-syg7
20
url VCID-8d6u-y4zg-7bbq
vulnerability_id VCID-8d6u-y4zg-7bbq
summary Pimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact of this path traversal and arbitrary extension is limited to creation of arbitrary files and appending data to existing files. When combined with the SQL Injection, the exported data `RESTRICTED DIFFUSION 9 / 9` can be controlled and a webshell can be uploaded. Attackers can use that to execute arbitrary PHP code on the server with the permissions of the webserver. Users may upgrade to version 10.5.18 to receive a patch or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30855
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00436
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30855
1
reference_url https://github.com/pimcore/pimcore/commit/7f788fa44bc18bc1c9182c25e26b770a1d30b62f.patch
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/7f788fa44bc18bc1c9182c25e26b770a1d30b62f.patch
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30855
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30855
3
reference_url https://github.com/pimcore/pimcore/pull/14498
reference_id 14498
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T15:07:33Z/
url https://github.com/pimcore/pimcore/pull/14498
4
reference_url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e.patch
reference_id f1d904094700b513c4756904fa2b1e19d08d890e.patch
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T15:07:33Z/
url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e.patch
5
reference_url https://github.com/advisories/GHSA-g2mc-fqqc-hxg3
reference_id GHSA-g2mc-fqqc-hxg3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g2mc-fqqc-hxg3
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-g2mc-fqqc-hxg3
reference_id GHSA-g2mc-fqqc-hxg3
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T15:07:33Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-g2mc-fqqc-hxg3
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-cbz2-sxrt-rffn
22
vulnerability VCID-e793-c5wh-yuaf
23
vulnerability VCID-em5a-b39y-6qgc
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-ha34-7pm3-pqgm
26
vulnerability VCID-hjs3-9b5k-e7c4
27
vulnerability VCID-hsfu-wneb-1kb3
28
vulnerability VCID-j76y-vhb3-4kc8
29
vulnerability VCID-kq1j-jfjz-7yb2
30
vulnerability VCID-mmg6-qgw8-uffr
31
vulnerability VCID-nsv2-svcf-83f1
32
vulnerability VCID-nyrx-zsbe-23g8
33
vulnerability VCID-p5rs-jqqj-dudg
34
vulnerability VCID-puqv-p29k-6bhv
35
vulnerability VCID-pvq6-vk11-6qdp
36
vulnerability VCID-r243-r7yh-93d1
37
vulnerability VCID-rq96-5ke4-kqcd
38
vulnerability VCID-rxn9-7h5z-pyfm
39
vulnerability VCID-sycr-3zm4-n7hm
40
vulnerability VCID-tcfq-uejs-nqbz
41
vulnerability VCID-tpw6-n6zr-tkcc
42
vulnerability VCID-uct4-qg7n-fuh1
43
vulnerability VCID-usku-z4hw-23dn
44
vulnerability VCID-vgqm-xjtk-yffe
45
vulnerability VCID-xrdb-kuj9-yffv
46
vulnerability VCID-xxfx-xxax-g3g2
47
vulnerability VCID-ygzv-hrfh-47gr
48
vulnerability VCID-ypv8-jnky-vkc4
49
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
aliases CVE-2023-30855, GHSA-g2mc-fqqc-hxg3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8d6u-y4zg-7bbq
21
url VCID-8jqk-yf3u-a3gn
vulnerability_id VCID-8jqk-yf3u-a3gn
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2361
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01578
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2361
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-9xg6-75mh-7x3f
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-9xg6-75mh-7x3f
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2361
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2361
3
reference_url https://huntr.dev/bounties/24d91b83-c3df-48f5-a713-9def733f2de7
reference_id 24d91b83-c3df-48f5-a713-9def733f2de7
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:47:38Z/
url https://huntr.dev/bounties/24d91b83-c3df-48f5-a713-9def733f2de7
4
reference_url https://github.com/pimcore/pimcore/commit/6970649f5d3790a1db9ef4324bece0d4cb95366a
reference_id 6970649f5d3790a1db9ef4324bece0d4cb95366a
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:47:38Z/
url https://github.com/pimcore/pimcore/commit/6970649f5d3790a1db9ef4324bece0d4cb95366a
5
reference_url https://github.com/advisories/GHSA-9xg6-75mh-7x3f
reference_id GHSA-9xg6-75mh-7x3f
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-9xg6-75mh-7x3f
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2361, GHSA-9xg6-75mh-7x3f
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8jqk-yf3u-a3gn
22
url VCID-9d5s-3c9u-c7gg
vulnerability_id VCID-9d5s-3c9u-c7gg
summary Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2983
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00512
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2983
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-m4mv-rmr7-h5f5
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-m4mv-rmr7-h5f5
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2983
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2983
3
reference_url https://huntr.dev/bounties/6b2f33d3-2fd0-4d2d-ad7b-2c1e2417eeb1
reference_id 6b2f33d3-2fd0-4d2d-ad7b-2c1e2417eeb1
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-10T20:52:11Z/
url https://huntr.dev/bounties/6b2f33d3-2fd0-4d2d-ad7b-2c1e2417eeb1
4
reference_url https://github.com/pimcore/pimcore/commit/c8f37b19c99cd82e4e558857d3e4d5476ea7228a
reference_id c8f37b19c99cd82e4e558857d3e4d5476ea7228a
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-10T20:52:11Z/
url https://github.com/pimcore/pimcore/commit/c8f37b19c99cd82e4e558857d3e4d5476ea7228a
5
reference_url https://github.com/advisories/GHSA-m4mv-rmr7-h5f5
reference_id GHSA-m4mv-rmr7-h5f5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m4mv-rmr7-h5f5
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.23
purl pkg:composer/pimcore/pimcore@10.5.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-hjs3-9b5k-e7c4
7
vulnerability VCID-j76y-vhb3-4kc8
8
vulnerability VCID-p5rs-jqqj-dudg
9
vulnerability VCID-rq96-5ke4-kqcd
10
vulnerability VCID-usku-z4hw-23dn
11
vulnerability VCID-vgqm-xjtk-yffe
12
vulnerability VCID-xrdb-kuj9-yffv
13
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.23
aliases CVE-2023-2983, GHSA-m4mv-rmr7-h5f5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9d5s-3c9u-c7gg
23
url VCID-a9r6-chrk-9ffe
vulnerability_id VCID-a9r6-chrk-9ffe
summary Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1517
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03474
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1517
1
reference_url https://github.com/pimcore/pimcore/pull/14631
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14631
2
reference_url https://github.com/pimcore/pimcore/pull/14631.patch
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14631.patch
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-42x8-2v53-pqmj
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-42x8-2v53-pqmj
4
reference_url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d/
reference_id
reference_type
scores
url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d/
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1517
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1517
6
reference_url https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7
reference_id 3a22700dacd8a439cffcb208838a4199e732cff7
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:22:48Z/
url https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7
7
reference_url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d
reference_id 82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:22:48Z/
url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d
8
reference_url https://github.com/advisories/GHSA-42x8-2v53-pqmj
reference_id GHSA-42x8-2v53-pqmj
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-42x8-2v53-pqmj
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1517, GHSA-42x8-2v53-pqmj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a9r6-chrk-9ffe
24
url VCID-afta-wcuy-4kah
vulnerability_id VCID-afta-wcuy-4kah
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5873
reference_id
reference_type
scores
0
value 4e-05
scoring_system epss
scoring_elements 0.00148
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5873
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5873
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5873
2
reference_url https://huntr.com/bounties/701cfc30-22a1-4c4b-9b2f-885c77c290ce
reference_id 701cfc30-22a1-4c4b-9b2f-885c77c290ce
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-27T20:32:14Z/
url https://huntr.com/bounties/701cfc30-22a1-4c4b-9b2f-885c77c290ce
3
reference_url https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c
reference_id 757375677dc83a44c6c22f26d97452cc5cda5d7c
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-27T20:32:14Z/
url https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c
4
reference_url https://github.com/advisories/GHSA-j59v-hh4p-q92m
reference_id GHSA-j59v-hh4p-q92m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j59v-hh4p-q92m
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.1.0
purl pkg:composer/pimcore/pimcore@11.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-cbz2-sxrt-rffn
2
vulnerability VCID-em5a-b39y-6qgc
3
vulnerability VCID-ha34-7pm3-pqgm
4
vulnerability VCID-p5rs-jqqj-dudg
5
vulnerability VCID-phk5-1sq4-t3gn
6
vulnerability VCID-vgqm-xjtk-yffe
7
vulnerability VCID-wvt7-h158-8kc9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.1.0
aliases CVE-2023-5873, GHSA-j59v-hh4p-q92m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-afta-wcuy-4kah
25
url VCID-b4ba-atzn-wkay
vulnerability_id VCID-b4ba-atzn-wkay
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1429
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1429
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-3223-w774-99fq
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-3223-w774-99fq
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1429
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1429
3
reference_url https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5
reference_id 7588c336edb24050656111b89d69e69cc9feb5f5
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:15:52Z/
url https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5
4
reference_url https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f
reference_id e0829fea-e458-47b8-84a3-a74476d9638f
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:15:52Z/
url https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f
5
reference_url https://github.com/advisories/GHSA-3223-w774-99fq
reference_id GHSA-3223-w774-99fq
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3223-w774-99fq
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1429, GHSA-3223-w774-99fq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b4ba-atzn-wkay
26
url VCID-cbz2-sxrt-rffn
vulnerability_id VCID-cbz2-sxrt-rffn
summary Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, the http_error_log file stores the $_COOKIE and $_SERVER variables, which means sensitive information such as database passwords, cookie session data, and other details can be accessed or recovered through the Pimcore backend. This vulnerability is fixed in 12.3.1 and 11.5.14.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-23493
reference_id
reference_type
scores
0
value 1e-05
scoring_system epss
scoring_elements 5e-05
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-23493
1
reference_url https://github.com/pimcore/pimcore/commit/002ec7d5f84973819236796e5b314703b58e8601
reference_id 002ec7d5f84973819236796e5b314703b58e8601
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-15T19:02:04Z/
url https://github.com/pimcore/pimcore/commit/002ec7d5f84973819236796e5b314703b58e8601
2
reference_url https://github.com/pimcore/pimcore/pull/18918
reference_id 18918
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-15T19:02:04Z/
url https://github.com/pimcore/pimcore/pull/18918
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-23493
reference_id CVE-2026-23493
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-23493
4
reference_url https://github.com/advisories/GHSA-q433-j342-rp9h
reference_id GHSA-q433-j342-rp9h
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q433-j342-rp9h
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-q433-j342-rp9h
reference_id GHSA-q433-j342-rp9h
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-15T19:02:04Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-q433-j342-rp9h
6
reference_url https://github.com/pimcore/pimcore/releases/tag/v11.5.14
reference_id v11.5.14
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-15T19:02:04Z/
url https://github.com/pimcore/pimcore/releases/tag/v11.5.14
7
reference_url https://github.com/pimcore/pimcore/releases/tag/v12.3.1
reference_id v12.3.1
reference_type
scores
0
value 8.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2026-01-15T19:02:04Z/
url https://github.com/pimcore/pimcore/releases/tag/v12.3.1
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.5.14
purl pkg:composer/pimcore/pimcore@11.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-em5a-b39y-6qgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.5.14
1
url pkg:composer/pimcore/pimcore@12.3.1
purl pkg:composer/pimcore/pimcore@12.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-em5a-b39y-6qgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@12.3.1
aliases CVE-2026-23493, GHSA-q433-j342-rp9h
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cbz2-sxrt-rffn
27
url VCID-e793-c5wh-yuaf
vulnerability_id VCID-e793-c5wh-yuaf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30848
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01545
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30848
1
reference_url https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3.patch
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3.patch
2
reference_url https://github.com/pimcore/pimcore/pull/14972
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14972
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-6mhm-gcpf-5gr8
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-6mhm-gcpf-5gr8
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30848
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30848
5
reference_url https://github.com/advisories/GHSA-6mhm-gcpf-5gr8
reference_id GHSA-6mhm-gcpf-5gr8
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6mhm-gcpf-5gr8
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30848, GHSA-6mhm-gcpf-5gr8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e793-c5wh-yuaf
28
url VCID-em5a-b39y-6qgc
vulnerability_id VCID-em5a-b39y-6qgc
summary Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, the filter query parameter in the dependency listing endpoints is JSON-decoded and the value field is concatenated directly into RLIKE clauses without sanitization or parameterized queries. Exploiting this issue requires admin authentication. An attacker with admin panel access can extract the full database including password hashes of other admin users. Version 12.3.3 contains a patch.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-27461
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02342
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-27461
1
reference_url https://github.com/pimcore/pimcore/pull/18991
reference_id 18991
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-24T18:56:21Z/
url https://github.com/pimcore/pimcore/pull/18991
2
reference_url https://github.com/pimcore/pimcore/commit/1c3925fbec4895abeb21e5c244a83679c4e4a6f4
reference_id 1c3925fbec4895abeb21e5c244a83679c4e4a6f4
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-24T18:56:21Z/
url https://github.com/pimcore/pimcore/commit/1c3925fbec4895abeb21e5c244a83679c4e4a6f4
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-27461
reference_id CVE-2026-27461
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-27461
4
reference_url https://github.com/advisories/GHSA-vxg3-v4p6-f3fp
reference_id GHSA-vxg3-v4p6-f3fp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vxg3-v4p6-f3fp
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-vxg3-v4p6-f3fp
reference_id GHSA-vxg3-v4p6-f3fp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-24T18:56:21Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-vxg3-v4p6-f3fp
6
reference_url https://github.com/pimcore/pimcore/releases/tag/v12.3.3
reference_id v12.3.3
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-02-24T18:56:21Z/
url https://github.com/pimcore/pimcore/releases/tag/v12.3.3
fixed_packages
0
url pkg:composer/pimcore/pimcore@12.0.0-RC1
purl pkg:composer/pimcore/pimcore@12.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cbz2-sxrt-rffn
1
vulnerability VCID-ha34-7pm3-pqgm
2
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@12.0.0-RC1
1
url pkg:composer/pimcore/pimcore@12.3.3
purl pkg:composer/pimcore/pimcore@12.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-reqw-yyg8-wugv
1
vulnerability VCID-xjuf-ar4q-uyfz
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@12.3.3
aliases CVE-2026-27461, GHSA-vxg3-v4p6-f3fp
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-em5a-b39y-6qgc
29
url VCID-fcm6-y2yu-2uca
vulnerability_id VCID-fcm6-y2yu-2uca
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28106
reference_id
reference_type
scores
0
value 0.0007
scoring_system epss
scoring_elements 0.21598
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28106
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28106
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28106
2
reference_url https://github.com/pimcore/pimcore/pull/14669.patch
reference_id 14669.patch
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://github.com/pimcore/pimcore/pull/14669.patch
3
reference_url https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2
reference_id c59d0bf1d03a5037b586fe06230694fa3818dbf2
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2
4
reference_url https://huntr.dev/bounties/fa77d780-9b23-404b-8c44-12108881d11a
reference_id fa77d780-9b23-404b-8c44-12108881d11a
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://huntr.dev/bounties/fa77d780-9b23-404b-8c44-12108881d11a
5
reference_url https://github.com/advisories/GHSA-x5j3-mq9g-8jc8
reference_id GHSA-x5j3-mq9g-8jc8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x5j3-mq9g-8jc8
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8
reference_id GHSA-x5j3-mq9g-8jc8
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28106, GHSA-x5j3-mq9g-8jc8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fcm6-y2yu-2uca
30
url VCID-ha34-7pm3-pqgm
vulnerability_id VCID-ha34-7pm3-pqgm
summary Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, an incomplete SQL injection patch in the Admin Search Find API allows an authenticated attacker to perform blind SQL injection. Although CVE-2023-30848 attempted to mitigate SQL injection by removing SQL comments (--) and catching syntax errors, the fix is insufficient. Attackers can still inject SQL payloads that do not rely on comments and infer database information via blind techniques. This vulnerability affects the admin interface and can lead to database information disclosure. This vulnerability is fixed in 12.3.1 and 11.5.14.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-23492
reference_id
reference_type
scores
0
value 5e-05
scoring_system epss
scoring_elements 0.00243
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-23492
1
reference_url https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3
reference_id 25ad8674886f2b938243cbe13e33e204a2e35cc3
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-01-14T21:14:38Z/
url https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-23492
reference_id CVE-2026-23492
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-23492
3
reference_url https://github.com/advisories/GHSA-6mhm-gcpf-5gr8
reference_id GHSA-6mhm-gcpf-5gr8
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/advisories/GHSA-6mhm-gcpf-5gr8
4
reference_url https://github.com/advisories/GHSA-qvr7-7g55-69xj
reference_id GHSA-qvr7-7g55-69xj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qvr7-7g55-69xj
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-qvr7-7g55-69xj
reference_id GHSA-qvr7-7g55-69xj
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:T/P:M/B:A/M:M/D:R/2026-01-14T21:14:38Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-qvr7-7g55-69xj
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.5.14
purl pkg:composer/pimcore/pimcore@11.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-em5a-b39y-6qgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.5.14
1
url pkg:composer/pimcore/pimcore@12.3.1
purl pkg:composer/pimcore/pimcore@12.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-em5a-b39y-6qgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@12.3.1
aliases CVE-2026-23492, GHSA-qvr7-7g55-69xj
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ha34-7pm3-pqgm
31
url VCID-hdnj-vcx7-e7cw
vulnerability_id VCID-hdnj-vcx7-e7cw
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-0323
reference_id
reference_type
scores
0
value 5e-05
scoring_system epss
scoring_elements 0.00212
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-0323
1
reference_url https://github.com/pimcore/pimcore/pull/13916.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13916.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-6vf6-g3pr-j83h
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-6vf6-g3pr-j83h
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-0323
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-0323
4
reference_url https://huntr.dev/bounties/129d6a4b-0504-4de1-a72c-3f12c4552343
reference_id 129d6a4b-0504-4de1-a72c-3f12c4552343
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-07T15:07:52Z/
url https://huntr.dev/bounties/129d6a4b-0504-4de1-a72c-3f12c4552343
5
reference_url https://github.com/pimcore/pimcore/commit/746fac1a342841624f63ab13edcd340358e1bc04
reference_id 746fac1a342841624f63ab13edcd340358e1bc04
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-07T15:07:52Z/
url https://github.com/pimcore/pimcore/commit/746fac1a342841624f63ab13edcd340358e1bc04
6
reference_url https://github.com/advisories/GHSA-6vf6-g3pr-j83h
reference_id GHSA-6vf6-g3pr-j83h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6vf6-g3pr-j83h
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.14
purl pkg:composer/pimcore/pimcore@10.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-79ph-2nu8-4bhf
15
vulnerability VCID-7rvk-x76k-rkex
16
vulnerability VCID-843n-ga86-syg7
17
vulnerability VCID-8d6u-y4zg-7bbq
18
vulnerability VCID-8jqk-yf3u-a3gn
19
vulnerability VCID-9d5s-3c9u-c7gg
20
vulnerability VCID-a9r6-chrk-9ffe
21
vulnerability VCID-afta-wcuy-4kah
22
vulnerability VCID-b4ba-atzn-wkay
23
vulnerability VCID-cbz2-sxrt-rffn
24
vulnerability VCID-e793-c5wh-yuaf
25
vulnerability VCID-em5a-b39y-6qgc
26
vulnerability VCID-fcm6-y2yu-2uca
27
vulnerability VCID-ha34-7pm3-pqgm
28
vulnerability VCID-hjs3-9b5k-e7c4
29
vulnerability VCID-hsfu-wneb-1kb3
30
vulnerability VCID-j76y-vhb3-4kc8
31
vulnerability VCID-kq1j-jfjz-7yb2
32
vulnerability VCID-mmg6-qgw8-uffr
33
vulnerability VCID-mwcv-7yze-jyfe
34
vulnerability VCID-nsv2-svcf-83f1
35
vulnerability VCID-nyrx-zsbe-23g8
36
vulnerability VCID-p5rs-jqqj-dudg
37
vulnerability VCID-puqv-p29k-6bhv
38
vulnerability VCID-pvq6-vk11-6qdp
39
vulnerability VCID-pvqw-sqms-aqg6
40
vulnerability VCID-pxg6-wvup-gkhb
41
vulnerability VCID-r243-r7yh-93d1
42
vulnerability VCID-rq96-5ke4-kqcd
43
vulnerability VCID-rxn9-7h5z-pyfm
44
vulnerability VCID-sycr-3zm4-n7hm
45
vulnerability VCID-tcfq-uejs-nqbz
46
vulnerability VCID-tpw6-n6zr-tkcc
47
vulnerability VCID-u34s-hhf3-uyfy
48
vulnerability VCID-uct4-qg7n-fuh1
49
vulnerability VCID-usku-z4hw-23dn
50
vulnerability VCID-vgqm-xjtk-yffe
51
vulnerability VCID-xrdb-kuj9-yffv
52
vulnerability VCID-xxfx-xxax-g3g2
53
vulnerability VCID-ygzv-hrfh-47gr
54
vulnerability VCID-ypv8-jnky-vkc4
55
vulnerability VCID-zgrb-9ta2-pqgu
56
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.14
aliases CVE-2023-0323, GHSA-6vf6-g3pr-j83h
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hdnj-vcx7-e7cw
32
url VCID-hjs3-9b5k-e7c4
vulnerability_id VCID-hjs3-9b5k-e7c4
summary 
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. A path traversal vulnerability exists in the `AssetController::importServerFilesAction`, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.This can lead to potential denial of service---key file overwrite.
The impact of this vulnerability allows attackers to: overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information. This could also cause a denial of service (DoS) if critical system files are overwritten or deleted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38708
reference_id
reference_type
scores
0
value 4e-05
scoring_system epss
scoring_elements 0.00208
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38708
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38708
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38708
2
reference_url https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c
reference_id 58012d0e3b8b926fb54eccbd64ec5c993b30c22c
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-03T18:21:04Z/
url https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c
3
reference_url https://github.com/advisories/GHSA-34hj-v8fm-x887
reference_id GHSA-34hj-v8fm-x887
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-34hj-v8fm-x887
4
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-34hj-v8fm-x887
reference_id GHSA-34hj-v8fm-x887
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-03T18:21:04Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-34hj-v8fm-x887
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.7
purl pkg:composer/pimcore/pimcore@10.6.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-cbz2-sxrt-rffn
3
vulnerability VCID-em5a-b39y-6qgc
4
vulnerability VCID-ha34-7pm3-pqgm
5
vulnerability VCID-p5rs-jqqj-dudg
6
vulnerability VCID-vgqm-xjtk-yffe
7
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.7
aliases CVE-2023-38708, GHSA-34hj-v8fm-x887
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hjs3-9b5k-e7c4
33
url VCID-hsfu-wneb-1kb3
vulnerability_id VCID-hsfu-wneb-1kb3
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2630
reference_id
reference_type
scores
0
value 0.0001
scoring_system epss
scoring_elements 0.01276
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2630
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-w766-3572-f2hv
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-w766-3572-f2hv
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2630
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2630
3
reference_url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38
reference_id 7e32cc28145274ddfc30fb791012d26c1278bd38
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:39:45Z/
url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38
4
reference_url https://huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e
reference_id e1001870-b8d8-4921-8b9c-bbdfb1a1491e
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:39:45Z/
url https://huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e
5
reference_url https://github.com/advisories/GHSA-w766-3572-f2hv
reference_id GHSA-w766-3572-f2hv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-w766-3572-f2hv
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2630, GHSA-w766-3572-f2hv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hsfu-wneb-1kb3
34
url VCID-j76y-vhb3-4kc8
vulnerability_id VCID-j76y-vhb3-4kc8
summary Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3819
reference_id
reference_type
scores
0
value 2e-05
scoring_system epss
scoring_elements 0.00059
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3819
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-r87r-982q-2c3q
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-r87r-982q-2c3q
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3819
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3819
3
reference_url https://github.com/pimcore/pimcore/commit/0237527b3244d251fa5ecd4912dfe4f8b2125c54
reference_id 0237527b3244d251fa5ecd4912dfe4f8b2125c54
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:38:48Z/
url https://github.com/pimcore/pimcore/commit/0237527b3244d251fa5ecd4912dfe4f8b2125c54
4
reference_url https://huntr.dev/bounties/be5e4d4c-1b0b-4c01-a1fc-00533135817c
reference_id be5e4d4c-1b0b-4c01-a1fc-00533135817c
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:38:48Z/
url https://huntr.dev/bounties/be5e4d4c-1b0b-4c01-a1fc-00533135817c
5
reference_url https://github.com/advisories/GHSA-r87r-982q-2c3q
reference_id GHSA-r87r-982q-2c3q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r87r-982q-2c3q
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-cbz2-sxrt-rffn
3
vulnerability VCID-em5a-b39y-6qgc
4
vulnerability VCID-ha34-7pm3-pqgm
5
vulnerability VCID-hjs3-9b5k-e7c4
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-vgqm-xjtk-yffe
8
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3819, GHSA-r87r-982q-2c3q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j76y-vhb3-4kc8
35
url VCID-kq1j-jfjz-7yb2
vulnerability_id VCID-kq1j-jfjz-7yb2
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2339
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00524
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2339
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-6fvf-x8c6-2f6j
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-6fvf-x8c6-2f6j
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2339
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2339
3
reference_url https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480
reference_id 6946f8a5a0a93b516c49f17a5b45044eebd73480
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T21:26:57Z/
url https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480
4
reference_url https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2
reference_id bb1537a5-fe7b-4c77-a582-10a82435fbc2
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T21:26:57Z/
url https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2
5
reference_url https://github.com/advisories/GHSA-6fvf-x8c6-2f6j
reference_id GHSA-6fvf-x8c6-2f6j
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6fvf-x8c6-2f6j
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2339, GHSA-6fvf-x8c6-2f6j
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kq1j-jfjz-7yb2
36
url VCID-mmg6-qgw8-uffr
vulnerability_id VCID-mmg6-qgw8-uffr
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2327
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2327
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-x9xj-pqmv-8jf7
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-x9xj-pqmv-8jf7
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2327
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2327
3
reference_url https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6
reference_id 7336b71f-a36f-4ce7-a26d-c8335ac713d6
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:19Z/
url https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6
4
reference_url https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f
reference_id fb3056a21d439135480ee299bf1ab646867b5f4f
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:19Z/
url https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f
5
reference_url https://github.com/advisories/GHSA-x9xj-pqmv-8jf7
reference_id GHSA-x9xj-pqmv-8jf7
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-x9xj-pqmv-8jf7
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2327, GHSA-x9xj-pqmv-8jf7
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mmg6-qgw8-uffr
37
url VCID-mwcv-7yze-jyfe
vulnerability_id VCID-mwcv-7yze-jyfe
summary 
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce.
The upload functionality for updating user profile does not properly validate the file content-type, allowing any authenticated user to bypass this security check by adding a valid signature (p.e. GIF89) and sending any invalid content-type. This could allow an authenticated attacker to upload HTML files with JS content that will be executed in the context of the domain. This issue has been patched in version 10.5.16.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-23937
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01744
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-23937
1
reference_url https://github.com/pimcore/pimcore/pull/14125
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14125
2
reference_url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38
3
reference_url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38/
reference_id
reference_type
scores
url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38/
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-23937
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-23937
5
reference_url https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f
reference_id 75a448ef8ac74424cf4e723afeb6d05f9eed872f
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T20:59:14Z/
url https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f
6
reference_url https://github.com/advisories/GHSA-8xv4-jj4h-qww6
reference_id GHSA-8xv4-jj4h-qww6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8xv4-jj4h-qww6
7
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6
reference_id GHSA-8xv4-jj4h-qww6
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
2
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
3
value MODERATE
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T20:59:14Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.16
purl pkg:composer/pimcore/pimcore@10.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-79ph-2nu8-4bhf
15
vulnerability VCID-7rvk-x76k-rkex
16
vulnerability VCID-843n-ga86-syg7
17
vulnerability VCID-8d6u-y4zg-7bbq
18
vulnerability VCID-8jqk-yf3u-a3gn
19
vulnerability VCID-9d5s-3c9u-c7gg
20
vulnerability VCID-a9r6-chrk-9ffe
21
vulnerability VCID-afta-wcuy-4kah
22
vulnerability VCID-b4ba-atzn-wkay
23
vulnerability VCID-cbz2-sxrt-rffn
24
vulnerability VCID-e793-c5wh-yuaf
25
vulnerability VCID-em5a-b39y-6qgc
26
vulnerability VCID-fcm6-y2yu-2uca
27
vulnerability VCID-ha34-7pm3-pqgm
28
vulnerability VCID-hjs3-9b5k-e7c4
29
vulnerability VCID-hsfu-wneb-1kb3
30
vulnerability VCID-j76y-vhb3-4kc8
31
vulnerability VCID-kq1j-jfjz-7yb2
32
vulnerability VCID-mmg6-qgw8-uffr
33
vulnerability VCID-nsv2-svcf-83f1
34
vulnerability VCID-nyrx-zsbe-23g8
35
vulnerability VCID-p5rs-jqqj-dudg
36
vulnerability VCID-puqv-p29k-6bhv
37
vulnerability VCID-pvq6-vk11-6qdp
38
vulnerability VCID-pvqw-sqms-aqg6
39
vulnerability VCID-pxg6-wvup-gkhb
40
vulnerability VCID-r243-r7yh-93d1
41
vulnerability VCID-rq96-5ke4-kqcd
42
vulnerability VCID-rxn9-7h5z-pyfm
43
vulnerability VCID-sycr-3zm4-n7hm
44
vulnerability VCID-tcfq-uejs-nqbz
45
vulnerability VCID-tpw6-n6zr-tkcc
46
vulnerability VCID-u34s-hhf3-uyfy
47
vulnerability VCID-uct4-qg7n-fuh1
48
vulnerability VCID-usku-z4hw-23dn
49
vulnerability VCID-vgqm-xjtk-yffe
50
vulnerability VCID-xrdb-kuj9-yffv
51
vulnerability VCID-xxfx-xxax-g3g2
52
vulnerability VCID-ygzv-hrfh-47gr
53
vulnerability VCID-ypv8-jnky-vkc4
54
vulnerability VCID-zgrb-9ta2-pqgu
55
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.16
aliases CVE-2023-23937, GHSA-8xv4-jj4h-qww6, GMS-2023-222
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mwcv-7yze-jyfe
38
url VCID-nsv2-svcf-83f1
vulnerability_id VCID-nsv2-svcf-83f1
summary Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2984
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.09252
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2984
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-46g3-f9r8-xj4v
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-46g3-f9r8-xj4v
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2984
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2984
3
reference_url https://huntr.dev/bounties/5df8b951-e2f1-4548-a7e3-601186e1b191
reference_id 5df8b951-e2f1-4548-a7e3-601186e1b191
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-13T19:58:45Z/
url https://huntr.dev/bounties/5df8b951-e2f1-4548-a7e3-601186e1b191
4
reference_url https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed
reference_id e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-13T19:58:45Z/
url https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed
5
reference_url https://github.com/advisories/GHSA-46g3-f9r8-xj4v
reference_id GHSA-46g3-f9r8-xj4v
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-46g3-f9r8-xj4v
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.22
purl pkg:composer/pimcore/pimcore@10.5.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-p5rs-jqqj-dudg
10
vulnerability VCID-rq96-5ke4-kqcd
11
vulnerability VCID-usku-z4hw-23dn
12
vulnerability VCID-vgqm-xjtk-yffe
13
vulnerability VCID-xrdb-kuj9-yffv
14
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.22
aliases CVE-2023-2984, GHSA-46g3-f9r8-xj4v
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nsv2-svcf-83f1
39
url VCID-nyrx-zsbe-23g8
vulnerability_id VCID-nyrx-zsbe-23g8
summary Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class definition. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Users should upgrade to version 10.5.19 or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28429
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01618
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28429
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28429
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28429
2
reference_url https://github.com/pimcore/pimcore/pull/14574
reference_id 14574
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:32Z/
url https://github.com/pimcore/pimcore/pull/14574
3
reference_url https://github.com/pimcore/pimcore/pull/14574.patch
reference_id 14574.patch
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:32Z/
url https://github.com/pimcore/pimcore/pull/14574.patch
4
reference_url https://github.com/advisories/GHSA-rcg9-hrhx-6q69
reference_id GHSA-rcg9-hrhx-6q69
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rcg9-hrhx-6q69
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-rcg9-hrhx-6q69
reference_id GHSA-rcg9-hrhx-6q69
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:32Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-rcg9-hrhx-6q69
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28429, GHSA-rcg9-hrhx-6q69
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nyrx-zsbe-23g8
40
url VCID-p5rs-jqqj-dudg
vulnerability_id VCID-p5rs-jqqj-dudg
summary Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL injection. Version 11.5.4 fixes the issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27617
reference_id
reference_type
scores
0
value 0.00544
scoring_system epss
scoring_elements 0.68197
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27617
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27617
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27617
2
reference_url https://github.com/pimcore/pimcore/commit/19a8520895484e68fd254773e32476565d91deea
reference_id 19a8520895484e68fd254773e32476565d91deea
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/commit/19a8520895484e68fd254773e32476565d91deea
3
reference_url https://github.com/advisories/GHSA-qjpx-5m2p-5pgh
reference_id GHSA-qjpx-5m2p-5pgh
reference_type
scores
url https://github.com/advisories/GHSA-qjpx-5m2p-5pgh
4
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-qjpx-5m2p-5pgh
reference_id GHSA-qjpx-5m2p-5pgh
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-qjpx-5m2p-5pgh
5
reference_url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347
reference_id Multiselect.php#L332-L347
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347
6
reference_url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47
reference_id RelationFilterConditionParser.php#L29-L47
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.5.4
purl pkg:composer/pimcore/pimcore@11.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cbz2-sxrt-rffn
1
vulnerability VCID-em5a-b39y-6qgc
2
vulnerability VCID-ha34-7pm3-pqgm
3
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.5.4
aliases CVE-2025-27617, GHSA-qjpx-5m2p-5pgh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p5rs-jqqj-dudg
41
url VCID-puqv-p29k-6bhv
vulnerability_id VCID-puqv-p29k-6bhv
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1286
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01422
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1286
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1286
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1286
2
reference_url https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c
reference_id 31d97442-3f87-439f-83f0-1c7862ef0c7c
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T16:33:06Z/
url https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c
3
reference_url https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce2610481098ca52c18
reference_id 82cca7f4a7560b160336cce2610481098ca52c18
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T16:33:06Z/
url https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce2610481098ca52c18
4
reference_url https://github.com/advisories/GHSA-8jv7-vwrc-mv4g
reference_id GHSA-8jv7-vwrc-mv4g
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8jv7-vwrc-mv4g
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1286, GHSA-8jv7-vwrc-mv4g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-puqv-p29k-6bhv
42
url VCID-pvq6-vk11-6qdp
vulnerability_id VCID-pvq6-vk11-6qdp
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2338
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.19752
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2338
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-4x35-vr82-xvj6
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-4x35-vr82-xvj6
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2338
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2338
3
reference_url https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520
reference_id 21e35af721c375ef4676ed50835e30d828e76520
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-03T16:28:43Z/
url https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520
4
reference_url https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462
reference_id bbf59fa7-cf5b-4945-81b0-328adc710462
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-03T16:28:43Z/
url https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462
5
reference_url https://github.com/advisories/GHSA-4x35-vr82-xvj6
reference_id GHSA-4x35-vr82-xvj6
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4x35-vr82-xvj6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2338, GHSA-4x35-vr82-xvj6
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pvq6-vk11-6qdp
43
url VCID-pvqw-sqms-aqg6
vulnerability_id VCID-pvqw-sqms-aqg6
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1115
reference_id
reference_type
scores
0
value 0.00014
scoring_system epss
scoring_elements 0.02778
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1115
1
reference_url https://github.com/pimcore/pimcore/pull/14500.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14500.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-97cp-8873-v2gf
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-97cp-8873-v2gf
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1115
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1115
4
reference_url https://github.com/pimcore/pimcore/commit/c6368b7cc69a3ebf2c83de7586f492ca1f404dd3
reference_id c6368b7cc69a3ebf2c83de7586f492ca1f404dd3
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-11T14:15:26Z/
url https://github.com/pimcore/pimcore/commit/c6368b7cc69a3ebf2c83de7586f492ca1f404dd3
5
reference_url https://huntr.dev/bounties/cfa80332-e4cf-4d64-b3e5-e10298628d17
reference_id cfa80332-e4cf-4d64-b3e5-e10298628d17
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-11T14:15:26Z/
url https://huntr.dev/bounties/cfa80332-e4cf-4d64-b3e5-e10298628d17
6
reference_url https://github.com/advisories/GHSA-97cp-8873-v2gf
reference_id GHSA-97cp-8873-v2gf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-97cp-8873-v2gf
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-cbz2-sxrt-rffn
22
vulnerability VCID-e793-c5wh-yuaf
23
vulnerability VCID-em5a-b39y-6qgc
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-ha34-7pm3-pqgm
26
vulnerability VCID-hjs3-9b5k-e7c4
27
vulnerability VCID-hsfu-wneb-1kb3
28
vulnerability VCID-j76y-vhb3-4kc8
29
vulnerability VCID-kq1j-jfjz-7yb2
30
vulnerability VCID-mmg6-qgw8-uffr
31
vulnerability VCID-nsv2-svcf-83f1
32
vulnerability VCID-nyrx-zsbe-23g8
33
vulnerability VCID-p5rs-jqqj-dudg
34
vulnerability VCID-puqv-p29k-6bhv
35
vulnerability VCID-pvq6-vk11-6qdp
36
vulnerability VCID-r243-r7yh-93d1
37
vulnerability VCID-rq96-5ke4-kqcd
38
vulnerability VCID-rxn9-7h5z-pyfm
39
vulnerability VCID-sycr-3zm4-n7hm
40
vulnerability VCID-tcfq-uejs-nqbz
41
vulnerability VCID-tpw6-n6zr-tkcc
42
vulnerability VCID-uct4-qg7n-fuh1
43
vulnerability VCID-usku-z4hw-23dn
44
vulnerability VCID-vgqm-xjtk-yffe
45
vulnerability VCID-xrdb-kuj9-yffv
46
vulnerability VCID-xxfx-xxax-g3g2
47
vulnerability VCID-ygzv-hrfh-47gr
48
vulnerability VCID-ypv8-jnky-vkc4
49
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1115, GHSA-97cp-8873-v2gf
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pvqw-sqms-aqg6
44
url VCID-pxg6-wvup-gkhb
vulnerability_id VCID-pxg6-wvup-gkhb
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1067
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1067
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1067
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1067
2
reference_url https://huntr.dev/bounties/31d17b34-f80d-49f2-86e7-97ae715cc045
reference_id 31d17b34-f80d-49f2-86e7-97ae715cc045
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T19:54:41Z/
url https://huntr.dev/bounties/31d17b34-f80d-49f2-86e7-97ae715cc045
3
reference_url https://github.com/pimcore/pimcore/commit/4b5733266d7d6aeb4f221a15e005db83fc198edf
reference_id 4b5733266d7d6aeb4f221a15e005db83fc198edf
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T19:54:41Z/
url https://github.com/pimcore/pimcore/commit/4b5733266d7d6aeb4f221a15e005db83fc198edf
4
reference_url https://github.com/advisories/GHSA-f2jh-mf2c-8278
reference_id GHSA-f2jh-mf2c-8278
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f2jh-mf2c-8278
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-cbz2-sxrt-rffn
22
vulnerability VCID-e793-c5wh-yuaf
23
vulnerability VCID-em5a-b39y-6qgc
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-ha34-7pm3-pqgm
26
vulnerability VCID-hjs3-9b5k-e7c4
27
vulnerability VCID-hsfu-wneb-1kb3
28
vulnerability VCID-j76y-vhb3-4kc8
29
vulnerability VCID-kq1j-jfjz-7yb2
30
vulnerability VCID-mmg6-qgw8-uffr
31
vulnerability VCID-nsv2-svcf-83f1
32
vulnerability VCID-nyrx-zsbe-23g8
33
vulnerability VCID-p5rs-jqqj-dudg
34
vulnerability VCID-puqv-p29k-6bhv
35
vulnerability VCID-pvq6-vk11-6qdp
36
vulnerability VCID-r243-r7yh-93d1
37
vulnerability VCID-rq96-5ke4-kqcd
38
vulnerability VCID-rxn9-7h5z-pyfm
39
vulnerability VCID-sycr-3zm4-n7hm
40
vulnerability VCID-tcfq-uejs-nqbz
41
vulnerability VCID-tpw6-n6zr-tkcc
42
vulnerability VCID-uct4-qg7n-fuh1
43
vulnerability VCID-usku-z4hw-23dn
44
vulnerability VCID-vgqm-xjtk-yffe
45
vulnerability VCID-xrdb-kuj9-yffv
46
vulnerability VCID-xxfx-xxax-g3g2
47
vulnerability VCID-ygzv-hrfh-47gr
48
vulnerability VCID-ypv8-jnky-vkc4
49
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1067, GHSA-f2jh-mf2c-8278
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pxg6-wvup-gkhb
45
url VCID-r243-r7yh-93d1
vulnerability_id VCID-r243-r7yh-93d1
summary Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2616
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01352
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2616
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-mhpj-7m7h-8p6x
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-mhpj-7m7h-8p6x
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2616
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2616
3
reference_url https://github.com/pimcore/pimcore/commit/07a2c95be524c7e20105cef58c5767d4ebb06091
reference_id 07a2c95be524c7e20105cef58c5767d4ebb06091
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:40:53Z/
url https://github.com/pimcore/pimcore/commit/07a2c95be524c7e20105cef58c5767d4ebb06091
4
reference_url https://huntr.dev/bounties/564cb512-2bcc-4458-8c20-88110ab45801
reference_id 564cb512-2bcc-4458-8c20-88110ab45801
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:40:53Z/
url https://huntr.dev/bounties/564cb512-2bcc-4458-8c20-88110ab45801
5
reference_url https://github.com/advisories/GHSA-mhpj-7m7h-8p6x
reference_id GHSA-mhpj-7m7h-8p6x
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mhpj-7m7h-8p6x
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2616, GHSA-mhpj-7m7h-8p6x
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r243-r7yh-93d1
46
url VCID-rq96-5ke4-kqcd
vulnerability_id VCID-rq96-5ke4-kqcd
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3673
reference_id
reference_type
scores
0
value 0.11372
scoring_system epss
scoring_elements 0.9372
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3673
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3673
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3673
2
reference_url https://huntr.dev/bounties/46ca0934-5260-477b-9e86-7b16bb18d0a9
reference_id 46ca0934-5260-477b-9e86-7b16bb18d0a9
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-22T15:08:39Z/
url https://huntr.dev/bounties/46ca0934-5260-477b-9e86-7b16bb18d0a9
3
reference_url https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
reference_id a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-22T15:08:39Z/
url https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
4
reference_url https://github.com/advisories/GHSA-rxp5-qwrf-pfv3
reference_id GHSA-rxp5-qwrf-pfv3
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rxp5-qwrf-pfv3
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.24
purl pkg:composer/pimcore/pimcore@10.5.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-hjs3-9b5k-e7c4
7
vulnerability VCID-j76y-vhb3-4kc8
8
vulnerability VCID-p5rs-jqqj-dudg
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-vgqm-xjtk-yffe
11
vulnerability VCID-xrdb-kuj9-yffv
12
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.24
aliases CVE-2023-3673, GHSA-rxp5-qwrf-pfv3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rq96-5ke4-kqcd
47
url VCID-rxn9-7h5z-pyfm
vulnerability_id VCID-rxn9-7h5z-pyfm
summary Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2328
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2328
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-2295-vh28-pphc
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-2295-vh28-pphc
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2328
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2328
3
reference_url https://huntr.dev/bounties/01a44584-e36b-46f4-ad94-53af488397f6
reference_id 01a44584-e36b-46f4-ad94-53af488397f6
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:51:34Z/
url https://huntr.dev/bounties/01a44584-e36b-46f4-ad94-53af488397f6
4
reference_url https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe
reference_id e3562bfe249c557d15474c9a0acd5e06628521fe
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:51:34Z/
url https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe
5
reference_url https://github.com/advisories/GHSA-2295-vh28-pphc
reference_id GHSA-2295-vh28-pphc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2295-vh28-pphc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2328, GHSA-2295-vh28-pphc
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rxn9-7h5z-pyfm
48
url VCID-sycr-3zm4-n7hm
vulnerability_id VCID-sycr-3zm4-n7hm
summary 
Cross-site Scripting (XSS) - stored in Print Documents
### Impact
Stored xss leads to steal cookies and other information of other users

### Patches
Update to version 10.5.19 or apply this patch manually https://github.com/pimcore/pimcore/pull/14560.patch

### Workarounds
Apply https://github.com/pimcore/pimcore/pull/14560.patch manually.

### References
https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c/
references
0
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-rrwm-8wqm-gwgv
reference_id
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-rrwm-8wqm-gwgv
1
reference_url https://github.com/advisories/GHSA-rrwm-8wqm-gwgv
reference_id GHSA-rrwm-8wqm-gwgv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-rrwm-8wqm-gwgv
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases GHSA-rrwm-8wqm-gwgv, GMS-2023-781
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sycr-3zm4-n7hm
49
url VCID-tcfq-uejs-nqbz
vulnerability_id VCID-tcfq-uejs-nqbz
summary A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser, potentially stealing cookies or redirecting users to malicious sites. The issue is fixed in version 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2332
reference_id
reference_type
scores
0
value 3e-05
scoring_system epss
scoring_elements 0.001
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2332
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-r7mm-jx6h-hv7m
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-r7mm-jx6h-hv7m
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2332
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2332
3
reference_url https://github.com/pimcore/pimcore/commit/a4491551967d879141a3fdf0986a9dd3d891abfe
reference_id a4491551967d879141a3fdf0986a9dd3d891abfe
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T21:00:05Z/
url https://github.com/pimcore/pimcore/commit/a4491551967d879141a3fdf0986a9dd3d891abfe
4
reference_url https://huntr.com/bounties/e436ed71-6741-4b30-89db-f7f3de4aca2c
reference_id e436ed71-6741-4b30-89db-f7f3de4aca2c
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T21:00:05Z/
url https://huntr.com/bounties/e436ed71-6741-4b30-89db-f7f3de4aca2c
5
reference_url https://github.com/advisories/GHSA-r7mm-jx6h-hv7m
reference_id GHSA-r7mm-jx6h-hv7m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-r7mm-jx6h-hv7m
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2332, GHSA-r7mm-jx6h-hv7m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tcfq-uejs-nqbz
50
url VCID-tpw6-n6zr-tkcc
vulnerability_id VCID-tpw6-n6zr-tkcc
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2340
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00677
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2340
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-g93x-fm2w-5pxw
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-g93x-fm2w-5pxw
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2340
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2340
3
reference_url https://huntr.dev/bounties/964762b0-b4fe-441c-81e1-0ebdbbf80f3b
reference_id 964762b0-b4fe-441c-81e1-0ebdbbf80f3b
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:45Z/
url https://huntr.dev/bounties/964762b0-b4fe-441c-81e1-0ebdbbf80f3b
4
reference_url https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e
reference_id aa38319e353cc3cdfac12e03e21ed7a8f3628d3e
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:45Z/
url https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e
5
reference_url https://github.com/advisories/GHSA-g93x-fm2w-5pxw
reference_id GHSA-g93x-fm2w-5pxw
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g93x-fm2w-5pxw
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2340, GHSA-g93x-fm2w-5pxw
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tpw6-n6zr-tkcc
51
url VCID-u34s-hhf3-uyfy
vulnerability_id VCID-u34s-hhf3-uyfy
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1116
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00677
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1116
1
reference_url https://github.com/pimcore/pimcore/pull/14467.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14467.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-96hp-38wx-j3wc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-96hp-38wx-j3wc
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1116
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1116
4
reference_url https://huntr.dev/bounties/3245ff99-9adf-4db9-af94-f995747e09d1
reference_id 3245ff99-9adf-4db9-af94-f995747e09d1
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:54Z/
url https://huntr.dev/bounties/3245ff99-9adf-4db9-af94-f995747e09d1
5
reference_url https://github.com/pimcore/pimcore/commit/f6d322efa207a737eedd8726b7c92e957a83341e
reference_id f6d322efa207a737eedd8726b7c92e957a83341e
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:54Z/
url https://github.com/pimcore/pimcore/commit/f6d322efa207a737eedd8726b7c92e957a83341e
6
reference_url https://github.com/advisories/GHSA-96hp-38wx-j3wc
reference_id GHSA-96hp-38wx-j3wc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-96hp-38wx-j3wc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-cbz2-sxrt-rffn
22
vulnerability VCID-e793-c5wh-yuaf
23
vulnerability VCID-em5a-b39y-6qgc
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-ha34-7pm3-pqgm
26
vulnerability VCID-hjs3-9b5k-e7c4
27
vulnerability VCID-hsfu-wneb-1kb3
28
vulnerability VCID-j76y-vhb3-4kc8
29
vulnerability VCID-kq1j-jfjz-7yb2
30
vulnerability VCID-mmg6-qgw8-uffr
31
vulnerability VCID-nsv2-svcf-83f1
32
vulnerability VCID-nyrx-zsbe-23g8
33
vulnerability VCID-p5rs-jqqj-dudg
34
vulnerability VCID-puqv-p29k-6bhv
35
vulnerability VCID-pvq6-vk11-6qdp
36
vulnerability VCID-r243-r7yh-93d1
37
vulnerability VCID-rq96-5ke4-kqcd
38
vulnerability VCID-rxn9-7h5z-pyfm
39
vulnerability VCID-sycr-3zm4-n7hm
40
vulnerability VCID-tcfq-uejs-nqbz
41
vulnerability VCID-tpw6-n6zr-tkcc
42
vulnerability VCID-uct4-qg7n-fuh1
43
vulnerability VCID-usku-z4hw-23dn
44
vulnerability VCID-vgqm-xjtk-yffe
45
vulnerability VCID-xrdb-kuj9-yffv
46
vulnerability VCID-xxfx-xxax-g3g2
47
vulnerability VCID-ygzv-hrfh-47gr
48
vulnerability VCID-ypv8-jnky-vkc4
49
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1116, GHSA-96hp-38wx-j3wc
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u34s-hhf3-uyfy
52
url VCID-uct4-qg7n-fuh1
vulnerability_id VCID-uct4-qg7n-fuh1
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2322
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01666
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2322
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-476g-v7hf-cw5m
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-476g-v7hf-cw5m
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2322
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2322
3
reference_url https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b9524705074a45e7f773
reference_id 9fc674892b8b53103098b9524705074a45e7f773
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:34:58Z/
url https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b9524705074a45e7f773
4
reference_url https://huntr.dev/bounties/f7228f3f-3bef-46fe-b0e3-56c432048a67
reference_id f7228f3f-3bef-46fe-b0e3-56c432048a67
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:34:58Z/
url https://huntr.dev/bounties/f7228f3f-3bef-46fe-b0e3-56c432048a67
5
reference_url https://github.com/advisories/GHSA-476g-v7hf-cw5m
reference_id GHSA-476g-v7hf-cw5m
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-476g-v7hf-cw5m
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2322, GHSA-476g-v7hf-cw5m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uct4-qg7n-fuh1
53
url VCID-usku-z4hw-23dn
vulnerability_id VCID-usku-z4hw-23dn
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3820
reference_id
reference_type
scores
0
value 0.41187
scoring_system epss
scoring_elements 0.97485
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3820
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-c9hw-557q-f8hq
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-c9hw-557q-f8hq
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3820
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3820
3
reference_url https://huntr.dev/bounties/b00a38b6-d040-494d-bf46-38f46ac1a1db
reference_id b00a38b6-d040-494d-bf46-38f46ac1a1db
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-16T13:29:49Z/
url https://huntr.dev/bounties/b00a38b6-d040-494d-bf46-38f46ac1a1db
4
reference_url https://github.com/pimcore/pimcore/commit/e641968979d4a2377bbea5e2a76bdede040d0b97
reference_id e641968979d4a2377bbea5e2a76bdede040d0b97
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-16T13:29:49Z/
url https://github.com/pimcore/pimcore/commit/e641968979d4a2377bbea5e2a76bdede040d0b97
5
reference_url https://github.com/advisories/GHSA-c9hw-557q-f8hq
reference_id GHSA-c9hw-557q-f8hq
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c9hw-557q-f8hq
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-cbz2-sxrt-rffn
3
vulnerability VCID-em5a-b39y-6qgc
4
vulnerability VCID-ha34-7pm3-pqgm
5
vulnerability VCID-hjs3-9b5k-e7c4
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-vgqm-xjtk-yffe
8
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3820, GHSA-c9hw-557q-f8hq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-usku-z4hw-23dn
54
url VCID-vgqm-xjtk-yffe
vulnerability_id VCID-vgqm-xjtk-yffe
summary Pimcore is an Open Source Data & Experience Management Platform. Prior to 12.3.1 and 11.5.14, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for reading or listing static routes. In Pimcore, static routes are custom URL patterns defined via the backend interface or the var/config/staticroutes.php file, including details like regex-based patterns, controllers, variables, and priorities. These routes are registered automatically through the PimcoreStaticRoutesBundle and integrated into the MVC routing system. Testing revealed that an authenticated backend user lacking explicit permissions was able to invoke the endpoint (e.g., GET /api/static-routes) and retrieve sensitive route configurations. This vulnerability is fixed in 12.3.1 and 11.5.14.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2026-23494
reference_id
reference_type
scores
0
value 1e-05
scoring_system epss
scoring_elements 0.00015
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2026-23494
1
reference_url https://github.com/pimcore/pimcore/pull/18893
reference_id 18893
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-15T18:08:08Z/
url https://github.com/pimcore/pimcore/pull/18893
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2026-23494
reference_id CVE-2026-23494
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2026-23494
3
reference_url https://github.com/advisories/GHSA-m3r2-724c-pwgf
reference_id GHSA-m3r2-724c-pwgf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-m3r2-724c-pwgf
4
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-m3r2-724c-pwgf
reference_id GHSA-m3r2-724c-pwgf
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-15T18:08:08Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-m3r2-724c-pwgf
5
reference_url https://github.com/pimcore/pimcore/releases/tag/v11.5.14
reference_id v11.5.14
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-15T18:08:08Z/
url https://github.com/pimcore/pimcore/releases/tag/v11.5.14
6
reference_url https://github.com/pimcore/pimcore/releases/tag/v12.3.1
reference_id v12.3.1
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2026-01-15T18:08:08Z/
url https://github.com/pimcore/pimcore/releases/tag/v12.3.1
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.5.14
purl pkg:composer/pimcore/pimcore@11.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-em5a-b39y-6qgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.5.14
1
url pkg:composer/pimcore/pimcore@12.3.1
purl pkg:composer/pimcore/pimcore@12.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-em5a-b39y-6qgc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@12.3.1
aliases CVE-2026-23494, GHSA-m3r2-724c-pwgf
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vgqm-xjtk-yffe
55
url VCID-xrdb-kuj9-yffv
vulnerability_id VCID-xrdb-kuj9-yffv
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3822
reference_id
reference_type
scores
0
value 0.1097
scoring_system epss
scoring_elements 0.93587
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3822
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3822
reference_id
reference_type
scores
0
value 6.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3822
2
reference_url https://huntr.dev/bounties/2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5
reference_id 2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5
reference_type
scores
0
value 6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
1
value 6.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:11:54Z/
url https://huntr.dev/bounties/2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5
3
reference_url https://github.com/pimcore/pimcore/commit/d75888a9b14baaad591548463cca09dfd1395236
reference_id d75888a9b14baaad591548463cca09dfd1395236
reference_type
scores
0
value 6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
1
value 6.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:11:54Z/
url https://github.com/pimcore/pimcore/commit/d75888a9b14baaad591548463cca09dfd1395236
4
reference_url https://github.com/advisories/GHSA-vmpv-qjhq-r463
reference_id GHSA-vmpv-qjhq-r463
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vmpv-qjhq-r463
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-cbz2-sxrt-rffn
3
vulnerability VCID-em5a-b39y-6qgc
4
vulnerability VCID-ha34-7pm3-pqgm
5
vulnerability VCID-hjs3-9b5k-e7c4
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-vgqm-xjtk-yffe
8
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3822, GHSA-vmpv-qjhq-r463
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xrdb-kuj9-yffv
56
url VCID-xxfx-xxax-g3g2
vulnerability_id VCID-xxfx-xxax-g3g2
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-4453
reference_id
reference_type
scores
0
value 3e-05
scoring_system epss
scoring_elements 0.00114
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-4453
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-599v-h3q5-g6r9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-599v-h3q5-g6r9
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-4453
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-4453
3
reference_url https://github.com/pimcore/pimcore/commit/234c0c02ea7502071b00ab673fbe4a6ac253080e
reference_id 234c0c02ea7502071b00ab673fbe4a6ac253080e
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-03T14:05:40Z/
url https://github.com/pimcore/pimcore/commit/234c0c02ea7502071b00ab673fbe4a6ac253080e
4
reference_url https://huntr.dev/bounties/245a8785-0fc0-4561-b181-fa20f869d993
reference_id 245a8785-0fc0-4561-b181-fa20f869d993
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-03T14:05:40Z/
url https://huntr.dev/bounties/245a8785-0fc0-4561-b181-fa20f869d993
5
reference_url https://github.com/advisories/GHSA-599v-h3q5-g6r9
reference_id GHSA-599v-h3q5-g6r9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-599v-h3q5-g6r9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.8
purl pkg:composer/pimcore/pimcore@10.6.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-cbz2-sxrt-rffn
3
vulnerability VCID-em5a-b39y-6qgc
4
vulnerability VCID-ha34-7pm3-pqgm
5
vulnerability VCID-p5rs-jqqj-dudg
6
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.8
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-4453, GHSA-599v-h3q5-g6r9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xxfx-xxax-g3g2
57
url VCID-ygzv-hrfh-47gr
vulnerability_id VCID-ygzv-hrfh-47gr
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1312
reference_id
reference_type
scores
0
value 0.00035
scoring_system epss
scoring_elements 0.1083
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1312
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
2
reference_url https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356
reference_id 2a64a32d-b1cc-4def-91da-18040d59f356
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T15:36:24Z/
url https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356
3
reference_url https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
reference_id d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T15:36:24Z/
url https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
4
reference_url https://github.com/advisories/GHSA-gh4g-65f6-84g5
reference_id GHSA-gh4g-65f6-84g5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gh4g-65f6-84g5
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-cbz2-sxrt-rffn
14
vulnerability VCID-e793-c5wh-yuaf
15
vulnerability VCID-em5a-b39y-6qgc
16
vulnerability VCID-ha34-7pm3-pqgm
17
vulnerability VCID-hjs3-9b5k-e7c4
18
vulnerability VCID-hsfu-wneb-1kb3
19
vulnerability VCID-j76y-vhb3-4kc8
20
vulnerability VCID-kq1j-jfjz-7yb2
21
vulnerability VCID-mmg6-qgw8-uffr
22
vulnerability VCID-nsv2-svcf-83f1
23
vulnerability VCID-p5rs-jqqj-dudg
24
vulnerability VCID-pvq6-vk11-6qdp
25
vulnerability VCID-r243-r7yh-93d1
26
vulnerability VCID-rq96-5ke4-kqcd
27
vulnerability VCID-rxn9-7h5z-pyfm
28
vulnerability VCID-tcfq-uejs-nqbz
29
vulnerability VCID-tpw6-n6zr-tkcc
30
vulnerability VCID-uct4-qg7n-fuh1
31
vulnerability VCID-usku-z4hw-23dn
32
vulnerability VCID-vgqm-xjtk-yffe
33
vulnerability VCID-xrdb-kuj9-yffv
34
vulnerability VCID-xxfx-xxax-g3g2
35
vulnerability VCID-ypv8-jnky-vkc4
36
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1312, GHSA-gh4g-65f6-84g5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ygzv-hrfh-47gr
58
url VCID-ypv8-jnky-vkc4
vulnerability_id VCID-ypv8-jnky-vkc4
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2323
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00677
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2323
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-cjv6-w5hf-5wr6
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-cjv6-w5hf-5wr6
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2323
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2323
3
reference_url https://huntr.dev/bounties/41edf190-f6bf-4a29-a237-7ff1b2d048d3
reference_id 41edf190-f6bf-4a29-a237-7ff1b2d048d3
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:50Z/
url https://huntr.dev/bounties/41edf190-f6bf-4a29-a237-7ff1b2d048d3
4
reference_url https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e
reference_id e88fa79de7b5903fb58ddbc231130b04d937d79e
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:50Z/
url https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e
5
reference_url https://github.com/advisories/GHSA-cjv6-w5hf-5wr6
reference_id GHSA-cjv6-w5hf-5wr6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cjv6-w5hf-5wr6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2323, GHSA-cjv6-w5hf-5wr6
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ypv8-jnky-vkc4
59
url VCID-zgrb-9ta2-pqgu
vulnerability_id VCID-zgrb-9ta2-pqgu
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30849
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.20229
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30849
1
reference_url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30849
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30849
3
reference_url https://github.com/pimcore/pimcore/pull/14968
reference_id 14968
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-31T18:17:25Z/
url https://github.com/pimcore/pimcore/pull/14968
4
reference_url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
reference_id c6c80905e58c7724c776f980570a56df7016c6d1.patch
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-31T18:17:25Z/
url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
5
reference_url https://github.com/advisories/GHSA-xmg8-w465-mr56
reference_id GHSA-xmg8-w465-mr56
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xmg8-w465-mr56
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56
reference_id GHSA-xmg8-w465-mr56
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-31T18:17:25Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-cbz2-sxrt-rffn
5
vulnerability VCID-em5a-b39y-6qgc
6
vulnerability VCID-ha34-7pm3-pqgm
7
vulnerability VCID-hjs3-9b5k-e7c4
8
vulnerability VCID-j76y-vhb3-4kc8
9
vulnerability VCID-nsv2-svcf-83f1
10
vulnerability VCID-p5rs-jqqj-dudg
11
vulnerability VCID-rq96-5ke4-kqcd
12
vulnerability VCID-usku-z4hw-23dn
13
vulnerability VCID-vgqm-xjtk-yffe
14
vulnerability VCID-xrdb-kuj9-yffv
15
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30849, GHSA-xmg8-w465-mr56
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zgrb-9ta2-pqgu
60
url VCID-zxa3-m253-gug3
vulnerability_id VCID-zxa3-m253-gug3
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1117
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00774
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1117
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-qxcw-rf4v-hp26
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
2
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-qxcw-rf4v-hp26
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1117
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1117
3
reference_url https://github.com/pimcore/pimcore/commit/b9ba69f66d6a9986fb36f239661b98cd33a89853
reference_id b9ba69f66d6a9986fb36f239661b98cd33a89853
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:19Z/
url https://github.com/pimcore/pimcore/commit/b9ba69f66d6a9986fb36f239661b98cd33a89853
4
reference_url https://huntr.dev/bounties/e8c0044d-a31b-4347-b2d5-59fbf492da39
reference_id e8c0044d-a31b-4347-b2d5-59fbf492da39
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:19Z/
url https://huntr.dev/bounties/e8c0044d-a31b-4347-b2d5-59fbf492da39
5
reference_url https://github.com/advisories/GHSA-qxcw-rf4v-hp26
reference_id GHSA-qxcw-rf4v-hp26
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-qxcw-rf4v-hp26
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-cbz2-sxrt-rffn
22
vulnerability VCID-e793-c5wh-yuaf
23
vulnerability VCID-em5a-b39y-6qgc
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-ha34-7pm3-pqgm
26
vulnerability VCID-hjs3-9b5k-e7c4
27
vulnerability VCID-hsfu-wneb-1kb3
28
vulnerability VCID-j76y-vhb3-4kc8
29
vulnerability VCID-kq1j-jfjz-7yb2
30
vulnerability VCID-mmg6-qgw8-uffr
31
vulnerability VCID-nsv2-svcf-83f1
32
vulnerability VCID-nyrx-zsbe-23g8
33
vulnerability VCID-p5rs-jqqj-dudg
34
vulnerability VCID-puqv-p29k-6bhv
35
vulnerability VCID-pvq6-vk11-6qdp
36
vulnerability VCID-r243-r7yh-93d1
37
vulnerability VCID-rq96-5ke4-kqcd
38
vulnerability VCID-rxn9-7h5z-pyfm
39
vulnerability VCID-sycr-3zm4-n7hm
40
vulnerability VCID-tcfq-uejs-nqbz
41
vulnerability VCID-tpw6-n6zr-tkcc
42
vulnerability VCID-uct4-qg7n-fuh1
43
vulnerability VCID-usku-z4hw-23dn
44
vulnerability VCID-vgqm-xjtk-yffe
45
vulnerability VCID-xrdb-kuj9-yffv
46
vulnerability VCID-xxfx-xxax-g3g2
47
vulnerability VCID-ygzv-hrfh-47gr
48
vulnerability VCID-ypv8-jnky-vkc4
49
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-cbz2-sxrt-rffn
4
vulnerability VCID-em5a-b39y-6qgc
5
vulnerability VCID-ha34-7pm3-pqgm
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-phk5-1sq4-t3gn
8
vulnerability VCID-vgqm-xjtk-yffe
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1117, GHSA-qxcw-rf4v-hp26
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zxa3-m253-gug3
Fixing_vulnerabilities
0
url VCID-u1gy-kwn1-3fgv
vulnerability_id VCID-u1gy-kwn1-3fgv
summary Pimcore Cross-site Scripting (XSS)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-2796
reference_id
reference_type
scores
0
value 0.00198
scoring_system epss
scoring_elements 0.41851
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-2796
1
reference_url https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d
2
reference_url https://huntr.dev/bounties/69d56ec3-8370-44cf-9732-4065e3076097
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/69d56ec3-8370-44cf-9732-4065e3076097
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-2796
reference_id CVE-2022-2796
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-2796
4
reference_url https://github.com/advisories/GHSA-pr4f-4pcx-2r3h
reference_id GHSA-pr4f-4pcx-2r3h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pr4f-4pcx-2r3h
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.4
purl pkg:composer/pimcore/pimcore@10.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-cbz2-sxrt-rffn
27
vulnerability VCID-e793-c5wh-yuaf
28
vulnerability VCID-em5a-b39y-6qgc
29
vulnerability VCID-fcm6-y2yu-2uca
30
vulnerability VCID-ha34-7pm3-pqgm
31
vulnerability VCID-hdnj-vcx7-e7cw
32
vulnerability VCID-hjs3-9b5k-e7c4
33
vulnerability VCID-hsfu-wneb-1kb3
34
vulnerability VCID-j76y-vhb3-4kc8
35
vulnerability VCID-kq1j-jfjz-7yb2
36
vulnerability VCID-mmg6-qgw8-uffr
37
vulnerability VCID-mwcv-7yze-jyfe
38
vulnerability VCID-nsv2-svcf-83f1
39
vulnerability VCID-nyrx-zsbe-23g8
40
vulnerability VCID-p5rs-jqqj-dudg
41
vulnerability VCID-puqv-p29k-6bhv
42
vulnerability VCID-pvq6-vk11-6qdp
43
vulnerability VCID-pvqw-sqms-aqg6
44
vulnerability VCID-pxg6-wvup-gkhb
45
vulnerability VCID-r243-r7yh-93d1
46
vulnerability VCID-rq96-5ke4-kqcd
47
vulnerability VCID-rxn9-7h5z-pyfm
48
vulnerability VCID-sycr-3zm4-n7hm
49
vulnerability VCID-tcfq-uejs-nqbz
50
vulnerability VCID-tpw6-n6zr-tkcc
51
vulnerability VCID-u34s-hhf3-uyfy
52
vulnerability VCID-uct4-qg7n-fuh1
53
vulnerability VCID-usku-z4hw-23dn
54
vulnerability VCID-vgqm-xjtk-yffe
55
vulnerability VCID-xrdb-kuj9-yffv
56
vulnerability VCID-xxfx-xxax-g3g2
57
vulnerability VCID-ygzv-hrfh-47gr
58
vulnerability VCID-ypv8-jnky-vkc4
59
vulnerability VCID-zgrb-9ta2-pqgu
60
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.4
aliases CVE-2022-2796, GHSA-pr4f-4pcx-2r3h
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u1gy-kwn1-3fgv
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.4