Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/pimcore/pimcore@6.5.2
Typecomposer
Namespacepimcore
Namepimcore
Version6.5.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version11.5.4
Latest_non_vulnerable_version12.3.7
Affected_by_vulnerabilities
0
url VCID-16vs-u1gr-g3ch
vulnerability_id VCID-16vs-u1gr-g3ch
summary If an attacker can control a script that is executed in the victim's browser, then they can typically fully compromise that user. Amongst other things, the attacker can: Perform any action within the application that the user can perform. View any information that the user is able to view. Modify any information that the user is able to modify. Initiate interactions with other application users, including malicious attacks, that will appear to originate from the initial victim user.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-3255
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01465
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-3255
1
reference_url https://huntr.dev/bounties/0ea45cf9-b256-454c-9031-2435294c0902
reference_id 0ea45cf9-b256-454c-9031-2435294c0902
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-05-28T15:21:24Z/
url https://huntr.dev/bounties/0ea45cf9-b256-454c-9031-2435294c0902
2
reference_url https://github.com/pimcore/pimcore/commit/1e916e7d668c9e47b217e20cc0ea4812f466201b
reference_id 1e916e7d668c9e47b217e20cc0ea4812f466201b
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-05-28T15:21:24Z/
url https://github.com/pimcore/pimcore/commit/1e916e7d668c9e47b217e20cc0ea4812f466201b
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-3255
reference_id CVE-2022-3255
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-3255
4
reference_url https://github.com/advisories/GHSA-wqr6-57qm-hhr5
reference_id GHSA-wqr6-57qm-hhr5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-wqr6-57qm-hhr5
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.7
purl pkg:composer/pimcore/pimcore@10.5.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-2n5e-7xn6-4ubt
3
vulnerability VCID-35c5-mzwz-8bgw
4
vulnerability VCID-3b57-hrf9-z3e2
5
vulnerability VCID-3hs9-ywbk-rbdy
6
vulnerability VCID-3q4h-tcnp-7qa1
7
vulnerability VCID-4ar7-yac3-fkf7
8
vulnerability VCID-4jxn-m7de-5yay
9
vulnerability VCID-4n7p-vgv2-2qc3
10
vulnerability VCID-4tqk-ragu-h7ce
11
vulnerability VCID-6286-wv98-9uht
12
vulnerability VCID-6fw4-9qqw-bqen
13
vulnerability VCID-6uw7-89nn-tkg3
14
vulnerability VCID-7191-wmtq-7fdg
15
vulnerability VCID-79ph-2nu8-4bhf
16
vulnerability VCID-7rvk-x76k-rkex
17
vulnerability VCID-843n-ga86-syg7
18
vulnerability VCID-8d6u-y4zg-7bbq
19
vulnerability VCID-8jqk-yf3u-a3gn
20
vulnerability VCID-9d5s-3c9u-c7gg
21
vulnerability VCID-a9r6-chrk-9ffe
22
vulnerability VCID-afta-wcuy-4kah
23
vulnerability VCID-b4ba-atzn-wkay
24
vulnerability VCID-e793-c5wh-yuaf
25
vulnerability VCID-fcm6-y2yu-2uca
26
vulnerability VCID-hdnj-vcx7-e7cw
27
vulnerability VCID-hjs3-9b5k-e7c4
28
vulnerability VCID-hsfu-wneb-1kb3
29
vulnerability VCID-j76y-vhb3-4kc8
30
vulnerability VCID-kq1j-jfjz-7yb2
31
vulnerability VCID-mmg6-qgw8-uffr
32
vulnerability VCID-mwcv-7yze-jyfe
33
vulnerability VCID-nsv2-svcf-83f1
34
vulnerability VCID-nyrx-zsbe-23g8
35
vulnerability VCID-p5rs-jqqj-dudg
36
vulnerability VCID-puqv-p29k-6bhv
37
vulnerability VCID-pvq6-vk11-6qdp
38
vulnerability VCID-pvqw-sqms-aqg6
39
vulnerability VCID-pxg6-wvup-gkhb
40
vulnerability VCID-r243-r7yh-93d1
41
vulnerability VCID-rq96-5ke4-kqcd
42
vulnerability VCID-rxn9-7h5z-pyfm
43
vulnerability VCID-sycr-3zm4-n7hm
44
vulnerability VCID-tcfq-uejs-nqbz
45
vulnerability VCID-tpw6-n6zr-tkcc
46
vulnerability VCID-u34s-hhf3-uyfy
47
vulnerability VCID-uct4-qg7n-fuh1
48
vulnerability VCID-usku-z4hw-23dn
49
vulnerability VCID-xrdb-kuj9-yffv
50
vulnerability VCID-xxfx-xxax-g3g2
51
vulnerability VCID-ygzv-hrfh-47gr
52
vulnerability VCID-ypv8-jnky-vkc4
53
vulnerability VCID-zgrb-9ta2-pqgu
54
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.7
aliases CVE-2022-3255, GHSA-wqr6-57qm-hhr5
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-16vs-u1gr-g3ch
1
url VCID-19kg-dggk-9bgb
vulnerability_id VCID-19kg-dggk-9bgb
summary SQL Injection found in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1429
reference_id
reference_type
scores
0
value 0.00232
scoring_system epss
scoring_elements 0.46225
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1429
1
reference_url https://github.com/pimcore/pimcore/commit/523a735ab94f004459b84ffdfd3db784586bbd82
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/523a735ab94f004459b84ffdfd3db784586bbd82
2
reference_url https://huntr.dev/bounties/cfba30b4-85fa-4499-9160-cd6e3119310e
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/cfba30b4-85fa-4499-9160-cd6e3119310e
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-1429
reference_id CVE-2022-1429
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-1429
4
reference_url https://github.com/advisories/GHSA-2v7p-f4qm-r5pc
reference_id GHSA-2v7p-f4qm-r5pc
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2v7p-f4qm-r5pc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.6
purl pkg:composer/pimcore/pimcore@10.3.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u1gy-kwn1-3fgv
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.6
aliases CVE-2022-1429, GHSA-2v7p-f4qm-r5pc
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-19kg-dggk-9bgb
2
url VCID-1e6u-83q7-kbcm
vulnerability_id VCID-1e6u-83q7-kbcm
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-37702
reference_id
reference_type
scores
0
value 0.00036
scoring_system epss
scoring_elements 0.11025
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-37702
1
reference_url https://github.com/pimcore/pimcore/pull/9992
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/9992
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-pp2h-95hm-hv9r
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-pp2h-95hm-hv9r
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-37702
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-37702
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.1.1
purl pkg:composer/pimcore/pimcore@10.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-cr87-arup-w3gs
38
vulnerability VCID-d73k-kkeb-n3b5
39
vulnerability VCID-d8pe-27pm-xbfy
40
vulnerability VCID-e793-c5wh-yuaf
41
vulnerability VCID-eqbu-bpgy-1yd3
42
vulnerability VCID-f189-dkah-2ke1
43
vulnerability VCID-fcm6-y2yu-2uca
44
vulnerability VCID-gf98-8eeb-afc5
45
vulnerability VCID-ha9j-gnw7-rucq
46
vulnerability VCID-hdnj-vcx7-e7cw
47
vulnerability VCID-hjs3-9b5k-e7c4
48
vulnerability VCID-hmq1-yjsd-5fah
49
vulnerability VCID-hsfu-wneb-1kb3
50
vulnerability VCID-hzjc-d8zw-5bbf
51
vulnerability VCID-j76y-vhb3-4kc8
52
vulnerability VCID-k9su-rd5b-ubg9
53
vulnerability VCID-kq1j-jfjz-7yb2
54
vulnerability VCID-mhbd-nf8m-vfgf
55
vulnerability VCID-mmg6-qgw8-uffr
56
vulnerability VCID-mwcv-7yze-jyfe
57
vulnerability VCID-nsv2-svcf-83f1
58
vulnerability VCID-nyrx-zsbe-23g8
59
vulnerability VCID-p5rs-jqqj-dudg
60
vulnerability VCID-pe3m-swu2-wybk
61
vulnerability VCID-puqv-p29k-6bhv
62
vulnerability VCID-pvba-dkzz-xfc4
63
vulnerability VCID-pvq6-vk11-6qdp
64
vulnerability VCID-pvqw-sqms-aqg6
65
vulnerability VCID-pxg6-wvup-gkhb
66
vulnerability VCID-r243-r7yh-93d1
67
vulnerability VCID-rq96-5ke4-kqcd
68
vulnerability VCID-rxn9-7h5z-pyfm
69
vulnerability VCID-sft8-4vjf-4ygm
70
vulnerability VCID-svwv-hc14-bfhj
71
vulnerability VCID-sw1n-sk71-y7bs
72
vulnerability VCID-sycr-3zm4-n7hm
73
vulnerability VCID-tcfq-uejs-nqbz
74
vulnerability VCID-tpw6-n6zr-tkcc
75
vulnerability VCID-u1gy-kwn1-3fgv
76
vulnerability VCID-u34s-hhf3-uyfy
77
vulnerability VCID-uct4-qg7n-fuh1
78
vulnerability VCID-ukcy-nczn-rfhz
79
vulnerability VCID-usku-z4hw-23dn
80
vulnerability VCID-vwzr-xk59-3ue5
81
vulnerability VCID-wbbu-rkkp-ebbj
82
vulnerability VCID-xrdb-kuj9-yffv
83
vulnerability VCID-xxfx-xxax-g3g2
84
vulnerability VCID-y9m4-cwvv-mbhe
85
vulnerability VCID-ygzv-hrfh-47gr
86
vulnerability VCID-ypv8-jnky-vkc4
87
vulnerability VCID-zbvh-bt4c-e3em
88
vulnerability VCID-zgrb-9ta2-pqgu
89
vulnerability VCID-zxa3-m253-gug3
90
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.1.1
aliases CVE-2021-37702, GHSA-pp2h-95hm-hv9r
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1e6u-83q7-kbcm
3
url VCID-1ghg-916g-5ycf
vulnerability_id VCID-1ghg-916g-5ycf
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.19, quoting is not done properly in UUID DAO model. There is the theoretical possibility to inject custom SQL if the developer is using this methods with input data and not doing proper input validation in advance and so relies on the auto-quoting being done by the DAO class. Users should update to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28108
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03387
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28108
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28108
reference_id
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28108
2
reference_url https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch
reference_id 08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:29:15Z/
url https://github.com/pimcore/pimcore/commit/08e7ba56ae983c3c67ec563b6989b16ef8f35275.patch
3
reference_url https://github.com/pimcore/pimcore/pull/14633
reference_id 14633
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:29:15Z/
url https://github.com/pimcore/pimcore/pull/14633
4
reference_url https://github.com/advisories/GHSA-xc9p-r5qj-8xm9
reference_id GHSA-xc9p-r5qj-8xm9
reference_type
scores
url https://github.com/advisories/GHSA-xc9p-r5qj-8xm9
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9
reference_id GHSA-xc9p-r5qj-8xm9
reference_type
scores
0
value 7.9
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-02-25T14:29:15Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-xc9p-r5qj-8xm9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28108, GHSA-xc9p-r5qj-8xm9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-1ghg-916g-5ycf
4
url VCID-2dhw-5ft3-4udh
vulnerability_id VCID-2dhw-5ft3-4udh
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2615
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01352
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2615
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-q7cc-m6jw-m262
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-q7cc-m6jw-m262
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2615
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2615
3
reference_url https://github.com/pimcore/pimcore/commit/7a799399e6843cd049e85da27ceb75b78505317f
reference_id 7a799399e6843cd049e85da27ceb75b78505317f
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:41:26Z/
url https://github.com/pimcore/pimcore/commit/7a799399e6843cd049e85da27ceb75b78505317f
4
reference_url https://huntr.dev/bounties/af9c360a-87f8-4e97-a24b-6db675ee942a
reference_id af9c360a-87f8-4e97-a24b-6db675ee942a
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:41:26Z/
url https://huntr.dev/bounties/af9c360a-87f8-4e97-a24b-6db675ee942a
5
reference_url https://github.com/advisories/GHSA-q7cc-m6jw-m262
reference_id GHSA-q7cc-m6jw-m262
reference_type
scores
url https://github.com/advisories/GHSA-q7cc-m6jw-m262
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2615, GHSA-q7cc-m6jw-m262
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2dhw-5ft3-4udh
5
url VCID-2n5e-7xn6-4ubt
vulnerability_id VCID-2n5e-7xn6-4ubt
summary RCE vulnerability in Pimcore/Mail & Dynamic Text Layout
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-39365
reference_id
reference_type
scores
0
value 0.00205
scoring_system epss
scoring_elements 0.42691
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-39365
1
reference_url https://github.com/pimcore/pimcore/commit/43aa34e018f5cd447bceb864358285ba92f68372
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/43aa34e018f5cd447bceb864358285ba92f68372
2
reference_url https://github.com/pimcore/pimcore/pull/13347
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13347
3
reference_url https://github.com/pimcore/pimcore/pull/13347.patch
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13347.patch
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-39365
reference_id CVE-2022-39365
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-39365
5
reference_url https://github.com/advisories/GHSA-5qxq-vgmm-q39m
reference_id GHSA-5qxq-vgmm-q39m
reference_type
scores
0
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-5qxq-vgmm-q39m
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-5qxq-vgmm-q39m
reference_id GHSA-5qxq-vgmm-q39m
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
1
value CRITICAL
scoring_system cvssv3.1_qr
scoring_elements
2
value CRITICAL
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-5qxq-vgmm-q39m
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.9
purl pkg:composer/pimcore/pimcore@10.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-79ph-2nu8-4bhf
15
vulnerability VCID-7rvk-x76k-rkex
16
vulnerability VCID-843n-ga86-syg7
17
vulnerability VCID-8d6u-y4zg-7bbq
18
vulnerability VCID-8jqk-yf3u-a3gn
19
vulnerability VCID-9d5s-3c9u-c7gg
20
vulnerability VCID-a9r6-chrk-9ffe
21
vulnerability VCID-afta-wcuy-4kah
22
vulnerability VCID-b4ba-atzn-wkay
23
vulnerability VCID-e793-c5wh-yuaf
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-hdnj-vcx7-e7cw
26
vulnerability VCID-hjs3-9b5k-e7c4
27
vulnerability VCID-hsfu-wneb-1kb3
28
vulnerability VCID-j76y-vhb3-4kc8
29
vulnerability VCID-kq1j-jfjz-7yb2
30
vulnerability VCID-mmg6-qgw8-uffr
31
vulnerability VCID-mwcv-7yze-jyfe
32
vulnerability VCID-nsv2-svcf-83f1
33
vulnerability VCID-nyrx-zsbe-23g8
34
vulnerability VCID-p5rs-jqqj-dudg
35
vulnerability VCID-puqv-p29k-6bhv
36
vulnerability VCID-pvq6-vk11-6qdp
37
vulnerability VCID-pvqw-sqms-aqg6
38
vulnerability VCID-pxg6-wvup-gkhb
39
vulnerability VCID-r243-r7yh-93d1
40
vulnerability VCID-rq96-5ke4-kqcd
41
vulnerability VCID-rxn9-7h5z-pyfm
42
vulnerability VCID-sycr-3zm4-n7hm
43
vulnerability VCID-tcfq-uejs-nqbz
44
vulnerability VCID-tpw6-n6zr-tkcc
45
vulnerability VCID-u34s-hhf3-uyfy
46
vulnerability VCID-uct4-qg7n-fuh1
47
vulnerability VCID-usku-z4hw-23dn
48
vulnerability VCID-xrdb-kuj9-yffv
49
vulnerability VCID-xxfx-xxax-g3g2
50
vulnerability VCID-ygzv-hrfh-47gr
51
vulnerability VCID-ypv8-jnky-vkc4
52
vulnerability VCID-zgrb-9ta2-pqgu
53
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.9
aliases CVE-2022-39365, GHSA-5qxq-vgmm-q39m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-2n5e-7xn6-4ubt
6
url VCID-35c5-mzwz-8bgw
vulnerability_id VCID-35c5-mzwz-8bgw
summary 
Withdrawn Advisory: Pimcore vulnerable to Cross-site Scripting
## Withdrawn Advisory
This advisory has been withdrawn because the maintainers no longer consider this to be a security issue. This link is maintained to preserve external references.

## Original Description
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 11.0.0.
references
0
reference_url https://github.com/pimcore/pimcore/commit/da2af2d413b144b9a742118124457d13232d31fd
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/da2af2d413b144b9a742118124457d13232d31fd
1
reference_url https://huntr.dev/bounties/04447124-c7d4-477f-8364-91fe5b59cda0
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/04447124-c7d4-477f-8364-91fe5b59cda0
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1247
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1247
3
reference_url https://github.com/advisories/GHSA-8wg7-88cg-7p9j
reference_id GHSA-8wg7-88cg-7p9j
reference_type
scores
url https://github.com/advisories/GHSA-8wg7-88cg-7p9j
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.0.0
purl pkg:composer/pimcore/pimcore@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-p5rs-jqqj-dudg
3
vulnerability VCID-phk5-1sq4-t3gn
4
vulnerability VCID-wvt7-h158-8kc9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0
aliases CVE-2023-1247, GHSA-8wg7-88cg-7p9j
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-35c5-mzwz-8bgw
7
url VCID-3b57-hrf9-z3e2
vulnerability_id VCID-3b57-hrf9-z3e2
summary Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2341
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04365
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2341
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-fq95-rx4q-qgg2
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-fq95-rx4q-qgg2
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2341
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2341
3
reference_url https://github.com/pimcore/pimcore/commit/66f1089fb1b9bcd575bfce9b1d4abb0f0499df11
reference_id 66f1089fb1b9bcd575bfce9b1d4abb0f0499df11
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:03Z/
url https://github.com/pimcore/pimcore/commit/66f1089fb1b9bcd575bfce9b1d4abb0f0499df11
4
reference_url https://huntr.dev/bounties/cf3901ac-a649-478f-ab08-094ef759c11d
reference_id cf3901ac-a649-478f-ab08-094ef759c11d
reference_type
scores
0
value 7.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:03Z/
url https://huntr.dev/bounties/cf3901ac-a649-478f-ab08-094ef759c11d
5
reference_url https://github.com/advisories/GHSA-fq95-rx4q-qgg2
reference_id GHSA-fq95-rx4q-qgg2
reference_type
scores
url https://github.com/advisories/GHSA-fq95-rx4q-qgg2
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2341, GHSA-fq95-rx4q-qgg2
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3b57-hrf9-z3e2
8
url VCID-3hs9-ywbk-rbdy
vulnerability_id VCID-3hs9-ywbk-rbdy
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2342
reference_id
reference_type
scores
0
value 0.00013
scoring_system epss
scoring_elements 0.02081
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2342
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-2c67-p4xh-m34w
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-2c67-p4xh-m34w
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2342
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2342
3
reference_url https://huntr.dev/bounties/01cd3ed5-dce8-4021-9de0-81cb14bf1829
reference_id 01cd3ed5-dce8-4021-9de0-81cb14bf1829
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:31:26Z/
url https://huntr.dev/bounties/01cd3ed5-dce8-4021-9de0-81cb14bf1829
4
reference_url https://github.com/pimcore/pimcore/commit/42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564
reference_id 42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:31:26Z/
url https://github.com/pimcore/pimcore/commit/42a5bbe5f16b97371fdbfdcf2bb3ee759dea8564
5
reference_url https://github.com/advisories/GHSA-2c67-p4xh-m34w
reference_id GHSA-2c67-p4xh-m34w
reference_type
scores
url https://github.com/advisories/GHSA-2c67-p4xh-m34w
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2342, GHSA-2c67-p4xh-m34w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3hs9-ywbk-rbdy
9
url VCID-3q4h-tcnp-7qa1
vulnerability_id VCID-3q4h-tcnp-7qa1
summary 
Reflected XSS in Application Logger module
### Impact
This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites.

### Patches
Update to version 10.5.19 or apply this patch manually https://github.com/pimcore/pimcore/pull/14606.patch

### Workarounds
Apply https://github.com/pimcore/pimcore/pull/14606.patch manually.

### References
https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356/
references
0
reference_url https://github.com/pimcore/pimcore/pull/14606
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14606
1
reference_url https://github.com/pimcore/pimcore/pull/14606.patch
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14606.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-2xpm-cmvw-3jcc
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-2xpm-cmvw-3jcc
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
4
reference_url https://github.com/advisories/GHSA-2xpm-cmvw-3jcc
reference_id GHSA-2xpm-cmvw-3jcc
reference_type
scores
url https://github.com/advisories/GHSA-2xpm-cmvw-3jcc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases GHSA-2xpm-cmvw-3jcc, GMS-2023-779
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3q4h-tcnp-7qa1
10
url VCID-3xuv-b8w7-d7hf
vulnerability_id VCID-3xuv-b8w7-d7hf
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0704
reference_id
reference_type
scores
0
value 0.00034
scoring_system epss
scoring_elements 0.10542
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0704
1
reference_url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
2
reference_url https://github.com/pimcore/pimcore/pull/11447
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/11447
3
reference_url https://huntr.dev/bounties/4142a8b4-b439-4328-aaa3-52f6fedfd0a6
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/4142a8b4-b439-4328-aaa3-52f6fedfd0a6
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0704
reference_id CVE-2022-0704
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0704
5
reference_url https://github.com/advisories/GHSA-pc32-x737-74cv
reference_id GHSA-pc32-x737-74cv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pc32-x737-74cv
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
1
url pkg:composer/pimcore/pimcore@10.4.0
purl pkg:composer/pimcore/pimcore@10.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u1gy-kwn1-3fgv
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.4.0
aliases CVE-2022-0704, GHSA-pc32-x737-74cv
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-3xuv-b8w7-d7hf
11
url VCID-42kn-ucws-muhu
vulnerability_id VCID-42kn-ucws-muhu
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-23405
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.08218
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-23405
1
reference_url https://github.com/pimcore/pimcore/pull/9572
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/9572
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-23405
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-23405
3
reference_url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1316297
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1316297
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.0.7
purl pkg:composer/pimcore/pimcore@10.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1e6u-83q7-kbcm
3
vulnerability VCID-1ghg-916g-5ycf
4
vulnerability VCID-2dhw-5ft3-4udh
5
vulnerability VCID-2n5e-7xn6-4ubt
6
vulnerability VCID-35c5-mzwz-8bgw
7
vulnerability VCID-3b57-hrf9-z3e2
8
vulnerability VCID-3hs9-ywbk-rbdy
9
vulnerability VCID-3q4h-tcnp-7qa1
10
vulnerability VCID-3xuv-b8w7-d7hf
11
vulnerability VCID-4ar7-yac3-fkf7
12
vulnerability VCID-4jxn-m7de-5yay
13
vulnerability VCID-4n7p-vgv2-2qc3
14
vulnerability VCID-4tqk-ragu-h7ce
15
vulnerability VCID-5ds5-2ey4-u7gm
16
vulnerability VCID-6286-wv98-9uht
17
vulnerability VCID-6etn-5u58-sqgg
18
vulnerability VCID-6fw4-9qqw-bqen
19
vulnerability VCID-6uw7-89nn-tkg3
20
vulnerability VCID-6z66-zt5u-ybbc
21
vulnerability VCID-7191-wmtq-7fdg
22
vulnerability VCID-79ph-2nu8-4bhf
23
vulnerability VCID-7kzv-g2ns-e7gr
24
vulnerability VCID-7rvk-x76k-rkex
25
vulnerability VCID-843n-ga86-syg7
26
vulnerability VCID-8caz-76fk-x7er
27
vulnerability VCID-8d6u-y4zg-7bbq
28
vulnerability VCID-8jqk-yf3u-a3gn
29
vulnerability VCID-9d5s-3c9u-c7gg
30
vulnerability VCID-a9r6-chrk-9ffe
31
vulnerability VCID-afta-wcuy-4kah
32
vulnerability VCID-akv1-wzyh-fydj
33
vulnerability VCID-amnn-gf11-7yc2
34
vulnerability VCID-b4ba-atzn-wkay
35
vulnerability VCID-bed6-u2ht-dqgs
36
vulnerability VCID-c1pt-5z3d-wffr
37
vulnerability VCID-cgxg-fxyp-dfd8
38
vulnerability VCID-cr87-arup-w3gs
39
vulnerability VCID-d73k-kkeb-n3b5
40
vulnerability VCID-d8pe-27pm-xbfy
41
vulnerability VCID-e793-c5wh-yuaf
42
vulnerability VCID-eqbu-bpgy-1yd3
43
vulnerability VCID-f189-dkah-2ke1
44
vulnerability VCID-fcm6-y2yu-2uca
45
vulnerability VCID-gf98-8eeb-afc5
46
vulnerability VCID-ha9j-gnw7-rucq
47
vulnerability VCID-hdnj-vcx7-e7cw
48
vulnerability VCID-hjs3-9b5k-e7c4
49
vulnerability VCID-hmq1-yjsd-5fah
50
vulnerability VCID-hsfu-wneb-1kb3
51
vulnerability VCID-hzjc-d8zw-5bbf
52
vulnerability VCID-j76y-vhb3-4kc8
53
vulnerability VCID-k9su-rd5b-ubg9
54
vulnerability VCID-kq1j-jfjz-7yb2
55
vulnerability VCID-mhbd-nf8m-vfgf
56
vulnerability VCID-mmg6-qgw8-uffr
57
vulnerability VCID-mwcv-7yze-jyfe
58
vulnerability VCID-nsv2-svcf-83f1
59
vulnerability VCID-nyrx-zsbe-23g8
60
vulnerability VCID-p5rs-jqqj-dudg
61
vulnerability VCID-pe3m-swu2-wybk
62
vulnerability VCID-puqv-p29k-6bhv
63
vulnerability VCID-pvba-dkzz-xfc4
64
vulnerability VCID-pvq6-vk11-6qdp
65
vulnerability VCID-pvqw-sqms-aqg6
66
vulnerability VCID-pxg6-wvup-gkhb
67
vulnerability VCID-r243-r7yh-93d1
68
vulnerability VCID-rq96-5ke4-kqcd
69
vulnerability VCID-rxn9-7h5z-pyfm
70
vulnerability VCID-sft8-4vjf-4ygm
71
vulnerability VCID-sk99-1trk-syb4
72
vulnerability VCID-svwv-hc14-bfhj
73
vulnerability VCID-sw1n-sk71-y7bs
74
vulnerability VCID-sycr-3zm4-n7hm
75
vulnerability VCID-tcfq-uejs-nqbz
76
vulnerability VCID-tpw6-n6zr-tkcc
77
vulnerability VCID-u1gy-kwn1-3fgv
78
vulnerability VCID-u34s-hhf3-uyfy
79
vulnerability VCID-uct4-qg7n-fuh1
80
vulnerability VCID-ukcy-nczn-rfhz
81
vulnerability VCID-usku-z4hw-23dn
82
vulnerability VCID-vwzr-xk59-3ue5
83
vulnerability VCID-wbbu-rkkp-ebbj
84
vulnerability VCID-xrdb-kuj9-yffv
85
vulnerability VCID-xxfx-xxax-g3g2
86
vulnerability VCID-y9m4-cwvv-mbhe
87
vulnerability VCID-ygzv-hrfh-47gr
88
vulnerability VCID-ypv8-jnky-vkc4
89
vulnerability VCID-zbvh-bt4c-e3em
90
vulnerability VCID-zgrb-9ta2-pqgu
91
vulnerability VCID-zxa3-m253-gug3
92
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.0.7
aliases CVE-2021-23405, GHSA-g8jx-66p8-vcm2
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-42kn-ucws-muhu
12
url VCID-4ar7-yac3-fkf7
vulnerability_id VCID-4ar7-yac3-fkf7
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3821
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00386
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3821
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3821
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3821
2
reference_url https://huntr.dev/bounties/599ba4f6-c900-4161-9127-f1e6a6e29aaa
reference_id 599ba4f6-c900-4161-9127-f1e6a6e29aaa
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:28:26Z/
url https://huntr.dev/bounties/599ba4f6-c900-4161-9127-f1e6a6e29aaa
3
reference_url https://github.com/pimcore/pimcore/commit/92811f07d39e4ad95c92003868f5f7309489d79c
reference_id 92811f07d39e4ad95c92003868f5f7309489d79c
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:28:26Z/
url https://github.com/pimcore/pimcore/commit/92811f07d39e4ad95c92003868f5f7309489d79c
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-hjs3-9b5k-e7c4
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3821, GHSA-78q2-cv3p-x9fm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4ar7-yac3-fkf7
13
url VCID-4jxn-m7de-5yay
vulnerability_id VCID-4jxn-m7de-5yay
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.21, a SQL Injection vulnerability exists in the admin translations API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30850
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.20229
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30850
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30850
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30850
2
reference_url https://github.com/pimcore/pimcore/pull/14952
reference_id 14952
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-30T21:12:49Z/
url https://github.com/pimcore/pimcore/pull/14952
3
reference_url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
reference_id 7e32cc28145274ddfc30fb791012d26c1278bd38.patch
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-30T21:12:49Z/
url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
4
reference_url https://github.com/advisories/GHSA-jwg4-qcgv-5wg6
reference_id GHSA-jwg4-qcgv-5wg6
reference_type
scores
url https://github.com/advisories/GHSA-jwg4-qcgv-5wg6
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-jwg4-qcgv-5wg6
reference_id GHSA-jwg4-qcgv-5wg6
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-30T21:12:49Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-jwg4-qcgv-5wg6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30850, GHSA-jwg4-qcgv-5wg6
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4jxn-m7de-5yay
14
url VCID-4n7p-vgv2-2qc3
vulnerability_id VCID-4n7p-vgv2-2qc3
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.21, the `/admin/misc/script-proxy` API endpoint that is accessible by an authenticated administrator user is vulnerable to arbitrary JavaScript and CSS file read via the `scriptPath` and `scripts` parameters. The `scriptPath` parameter is not sanitized properly and is vulnerable to path traversal attack. Any JavaScript/CSS file from the application server can be read by specifying sufficient number of `../` patterns to go out from the application webroot followed by path of the folder where the file is located in the "scriptPath" parameter and the file name in the "scripts" parameter. The JavaScript file is successfully read only if the web application has read access to it. Users should update to version 10.5.21 to receive a patch or, as a workaround, apply the patch manual.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30852
reference_id
reference_type
scores
0
value 0.0001
scoring_system epss
scoring_elements 0.01137
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30852
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30852
reference_id
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30852
2
reference_url https://github.com/pimcore/pimcore/pull/14959
reference_id 14959
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T19:34:59Z/
url https://github.com/pimcore/pimcore/pull/14959
3
reference_url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch
reference_id 498cadec2292f7842fb10612068ac78496e884b4.patch
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T19:34:59Z/
url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4.patch
4
reference_url https://github.com/advisories/GHSA-j5c3-r84f-9596
reference_id GHSA-j5c3-r84f-9596
reference_type
scores
url https://github.com/advisories/GHSA-j5c3-r84f-9596
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596
reference_id GHSA-j5c3-r84f-9596
reference_type
scores
0
value 4.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T19:34:59Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-j5c3-r84f-9596
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30852, GHSA-j5c3-r84f-9596
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4n7p-vgv2-2qc3
15
url VCID-4tqk-ragu-h7ce
vulnerability_id VCID-4tqk-ragu-h7ce
summary Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2614
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01352
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2614
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-m6m9-gr85-79vm
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-m6m9-gr85-79vm
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2614
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2614
3
reference_url https://huntr.dev/bounties/1a5e6c65-2c5e-4617-9411-5b47a7e743a6
reference_id 1a5e6c65-2c5e-4617-9411-5b47a7e743a6
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:42:03Z/
url https://huntr.dev/bounties/1a5e6c65-2c5e-4617-9411-5b47a7e743a6
4
reference_url https://github.com/pimcore/pimcore/commit/c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7
reference_id c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:42:03Z/
url https://github.com/pimcore/pimcore/commit/c36ef54ce33f7b5e74b7b0ab9eabfed47c018fc7
5
reference_url https://github.com/advisories/GHSA-m6m9-gr85-79vm
reference_id GHSA-m6m9-gr85-79vm
reference_type
scores
url https://github.com/advisories/GHSA-m6m9-gr85-79vm
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2614, GHSA-m6m9-gr85-79vm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-4tqk-ragu-h7ce
16
url VCID-5ds5-2ey4-u7gm
vulnerability_id VCID-5ds5-2ey4-u7gm
summary Path traversal in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0665
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06714
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0665
1
reference_url https://github.com/pimcore/pimcore/commit/28945649a6234ccaa8c94c6cd83d1954603baf3e
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/28945649a6234ccaa8c94c6cd83d1954603baf3e
2
reference_url https://huntr.dev/bounties/423df64d-c591-4ad9-bf1c-411bcbc06ba3
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/423df64d-c591-4ad9-bf1c-411bcbc06ba3
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0665
reference_id CVE-2022-0665
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0665
4
reference_url https://github.com/advisories/GHSA-gjq4-69wj-p6pr
reference_id GHSA-gjq4-69wj-p6pr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-gjq4-69wj-p6pr
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.2
purl pkg:composer/pimcore/pimcore@10.3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-6286-wv98-9uht
14
vulnerability VCID-6etn-5u58-sqgg
15
vulnerability VCID-6fw4-9qqw-bqen
16
vulnerability VCID-6uw7-89nn-tkg3
17
vulnerability VCID-7191-wmtq-7fdg
18
vulnerability VCID-79ph-2nu8-4bhf
19
vulnerability VCID-7rvk-x76k-rkex
20
vulnerability VCID-843n-ga86-syg7
21
vulnerability VCID-8caz-76fk-x7er
22
vulnerability VCID-8d6u-y4zg-7bbq
23
vulnerability VCID-8jqk-yf3u-a3gn
24
vulnerability VCID-9d5s-3c9u-c7gg
25
vulnerability VCID-a9r6-chrk-9ffe
26
vulnerability VCID-afta-wcuy-4kah
27
vulnerability VCID-akv1-wzyh-fydj
28
vulnerability VCID-amnn-gf11-7yc2
29
vulnerability VCID-b4ba-atzn-wkay
30
vulnerability VCID-e793-c5wh-yuaf
31
vulnerability VCID-fcm6-y2yu-2uca
32
vulnerability VCID-hdnj-vcx7-e7cw
33
vulnerability VCID-hjs3-9b5k-e7c4
34
vulnerability VCID-hsfu-wneb-1kb3
35
vulnerability VCID-j76y-vhb3-4kc8
36
vulnerability VCID-k9su-rd5b-ubg9
37
vulnerability VCID-kq1j-jfjz-7yb2
38
vulnerability VCID-mmg6-qgw8-uffr
39
vulnerability VCID-mwcv-7yze-jyfe
40
vulnerability VCID-nsv2-svcf-83f1
41
vulnerability VCID-nyrx-zsbe-23g8
42
vulnerability VCID-p5rs-jqqj-dudg
43
vulnerability VCID-puqv-p29k-6bhv
44
vulnerability VCID-pvq6-vk11-6qdp
45
vulnerability VCID-pvqw-sqms-aqg6
46
vulnerability VCID-pxg6-wvup-gkhb
47
vulnerability VCID-r243-r7yh-93d1
48
vulnerability VCID-rq96-5ke4-kqcd
49
vulnerability VCID-rxn9-7h5z-pyfm
50
vulnerability VCID-svwv-hc14-bfhj
51
vulnerability VCID-sycr-3zm4-n7hm
52
vulnerability VCID-tcfq-uejs-nqbz
53
vulnerability VCID-tpw6-n6zr-tkcc
54
vulnerability VCID-u1gy-kwn1-3fgv
55
vulnerability VCID-u34s-hhf3-uyfy
56
vulnerability VCID-uct4-qg7n-fuh1
57
vulnerability VCID-usku-z4hw-23dn
58
vulnerability VCID-vwzr-xk59-3ue5
59
vulnerability VCID-xrdb-kuj9-yffv
60
vulnerability VCID-xxfx-xxax-g3g2
61
vulnerability VCID-ygzv-hrfh-47gr
62
vulnerability VCID-ypv8-jnky-vkc4
63
vulnerability VCID-zgrb-9ta2-pqgu
64
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.2
aliases CVE-2022-0665, GHSA-gjq4-69wj-p6pr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-5ds5-2ey4-u7gm
17
url VCID-6286-wv98-9uht
vulnerability_id VCID-6286-wv98-9uht
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write arbitrary SQL queries and given the fact that this endpoint is using the GET method (no CSRF protection), an attacker can inject an arbitrary query by manipulating a user to click on a link. Users should upgrade to version 10.5.19 to receive a patch or, as a workaround, may apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28438
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.08012
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28438
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28438
reference_id
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28438
2
reference_url https://github.com/pimcore/pimcore/pull/14526
reference_id 14526
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:17Z/
url https://github.com/pimcore/pimcore/pull/14526
3
reference_url https://github.com/pimcore/pimcore/commit/d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch
reference_id d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:17Z/
url https://github.com/pimcore/pimcore/commit/d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch
4
reference_url https://github.com/advisories/GHSA-vf7q-g2pv-jxvx
reference_id GHSA-vf7q-g2pv-jxvx
reference_type
scores
url https://github.com/advisories/GHSA-vf7q-g2pv-jxvx
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-vf7q-g2pv-jxvx
reference_id GHSA-vf7q-g2pv-jxvx
reference_type
scores
0
value 6.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:17Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-vf7q-g2pv-jxvx
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28438, GHSA-vf7q-g2pv-jxvx
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6286-wv98-9uht
18
url VCID-6etn-5u58-sqgg
vulnerability_id VCID-6etn-5u58-sqgg
summary Pimcore vulnerable to stored stored Cross-site Scripting via`properties` when creating new users
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-3211
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05775
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-3211
1
reference_url https://github.com/pimcore/pimcore/commit/0508c491c6a4f3d119ec8dcf444e52ff25028c36
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/0508c491c6a4f3d119ec8dcf444e52ff25028c36
2
reference_url https://github.com/pimcore/pimcore/pull/13129
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13129
3
reference_url https://huntr.dev/bounties/31ac0506-ae38-4128-a46d-71d5d079f8b7
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/31ac0506-ae38-4128-a46d-71d5d079f8b7
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-3211
reference_id CVE-2022-3211
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-3211
5
reference_url https://github.com/advisories/GHSA-4849-x3jx-45qr
reference_id GHSA-4849-x3jx-45qr
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4849-x3jx-45qr
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.6
purl pkg:composer/pimcore/pimcore@10.5.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6fw4-9qqw-bqen
14
vulnerability VCID-6uw7-89nn-tkg3
15
vulnerability VCID-7191-wmtq-7fdg
16
vulnerability VCID-79ph-2nu8-4bhf
17
vulnerability VCID-7rvk-x76k-rkex
18
vulnerability VCID-843n-ga86-syg7
19
vulnerability VCID-8d6u-y4zg-7bbq
20
vulnerability VCID-8jqk-yf3u-a3gn
21
vulnerability VCID-9d5s-3c9u-c7gg
22
vulnerability VCID-a9r6-chrk-9ffe
23
vulnerability VCID-afta-wcuy-4kah
24
vulnerability VCID-b4ba-atzn-wkay
25
vulnerability VCID-e793-c5wh-yuaf
26
vulnerability VCID-fcm6-y2yu-2uca
27
vulnerability VCID-hdnj-vcx7-e7cw
28
vulnerability VCID-hjs3-9b5k-e7c4
29
vulnerability VCID-hsfu-wneb-1kb3
30
vulnerability VCID-j76y-vhb3-4kc8
31
vulnerability VCID-kq1j-jfjz-7yb2
32
vulnerability VCID-mmg6-qgw8-uffr
33
vulnerability VCID-mwcv-7yze-jyfe
34
vulnerability VCID-nsv2-svcf-83f1
35
vulnerability VCID-nyrx-zsbe-23g8
36
vulnerability VCID-p5rs-jqqj-dudg
37
vulnerability VCID-puqv-p29k-6bhv
38
vulnerability VCID-pvq6-vk11-6qdp
39
vulnerability VCID-pvqw-sqms-aqg6
40
vulnerability VCID-pxg6-wvup-gkhb
41
vulnerability VCID-r243-r7yh-93d1
42
vulnerability VCID-rq96-5ke4-kqcd
43
vulnerability VCID-rxn9-7h5z-pyfm
44
vulnerability VCID-sycr-3zm4-n7hm
45
vulnerability VCID-tcfq-uejs-nqbz
46
vulnerability VCID-tpw6-n6zr-tkcc
47
vulnerability VCID-u34s-hhf3-uyfy
48
vulnerability VCID-uct4-qg7n-fuh1
49
vulnerability VCID-usku-z4hw-23dn
50
vulnerability VCID-xrdb-kuj9-yffv
51
vulnerability VCID-xxfx-xxax-g3g2
52
vulnerability VCID-ygzv-hrfh-47gr
53
vulnerability VCID-ypv8-jnky-vkc4
54
vulnerability VCID-zgrb-9ta2-pqgu
55
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.6
aliases CVE-2022-3211, GHSA-4849-x3jx-45qr
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6etn-5u58-sqgg
19
url VCID-6fw4-9qqw-bqen
vulnerability_id VCID-6fw4-9qqw-bqen
summary Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2343
reference_id
reference_type
scores
0
value 9e-05
scoring_system epss
scoring_elements 0.01017
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2343
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-9q7q-r54q-3f3g
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-9q7q-r54q-3f3g
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2343
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2343
3
reference_url https://huntr.dev/bounties/2fa17227-a717-4b66-ab5a-16bffbb4edb2
reference_id 2fa17227-a717-4b66-ab5a-16bffbb4edb2
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:04:53Z/
url https://huntr.dev/bounties/2fa17227-a717-4b66-ab5a-16bffbb4edb2
4
reference_url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e
reference_id f1d904094700b513c4756904fa2b1e19d08d890e
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:04:53Z/
url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e
5
reference_url https://github.com/advisories/GHSA-9q7q-r54q-3f3g
reference_id GHSA-9q7q-r54q-3f3g
reference_type
scores
url https://github.com/advisories/GHSA-9q7q-r54q-3f3g
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2343, GHSA-9q7q-r54q-3f3g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6fw4-9qqw-bqen
20
url VCID-6uw7-89nn-tkg3
vulnerability_id VCID-6uw7-89nn-tkg3
summary Pimcore is an Open Source Data & Experience Management Platform. In affected versions the `/admin/object/grid-proxy` endpoint calls `getFilterCondition()` on fields of classes to be filtered for, passing input from the request, and later executes the returned SQL. One implementation of `getFilterCondition()` is in `Multiselect`, which does not normalize/escape/validate the passed value. Any backend user with very basic permissions can execute arbitrary SQL statements and thus alter any data or escalate their privileges to at least admin level. This vulnerability has been addressed in version 11.1.1. Users are advised to upgrade. There are no known workarounds for this vulnerability.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-47637
reference_id
reference_type
scores
0
value 0.7657
scoring_system epss
scoring_elements 0.98967
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-47637
1
reference_url https://github.com/pimcore/pimcore/blob/42b6cfa77c4540205bdd10689893ccb73e4bac8f/models/DataObject/ClassDefinition/Data/Multiselect.php#L285-L312
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/blob/42b6cfa77c4540205bdd10689893ccb73e4bac8f/models/DataObject/ClassDefinition/Data/Multiselect.php#L285-L312
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-47637
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-47637
3
reference_url https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0
reference_id d164d99c90f098d0ccd6b72929c48b727e2953a0
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T17:40:14Z/
url https://github.com/pimcore/pimcore/commit/d164d99c90f098d0ccd6b72929c48b727e2953a0
4
reference_url https://github.com/advisories/GHSA-72hh-xf79-429p
reference_id GHSA-72hh-xf79-429p
reference_type
scores
url https://github.com/advisories/GHSA-72hh-xf79-429p
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p
reference_id GHSA-72hh-xf79-429p
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T17:40:14Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-72hh-xf79-429p
6
reference_url https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311
reference_id GridHelperService.php#L311
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-08-29T17:40:14Z/
url https://github.com/pimcore/admin-ui-classic-bundle/blob/bba7c7419cb1f06d5fd98781eab4d6995e4e5dca/src/Helper/GridHelperService.php#L311
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.1.1
purl pkg:composer/pimcore/pimcore@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2b8z-rbsm-1fbp
1
vulnerability VCID-p5rs-jqqj-dudg
2
vulnerability VCID-phk5-1sq4-t3gn
3
vulnerability VCID-wvt7-h158-8kc9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.1.1
aliases CVE-2023-47637, GHSA-72hh-xf79-429p
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6uw7-89nn-tkg3
21
url VCID-6z66-zt5u-ybbc
vulnerability_id VCID-6z66-zt5u-ybbc
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0893
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04213
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0893
1
reference_url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
2
reference_url https://github.com/pimcore/pimcore/pull/11447
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/11447
3
reference_url https://huntr.dev/bounties/2859a1c1-941c-4efc-a3ad-a0657c7a77e9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/2859a1c1-941c-4efc-a3ad-a0657c7a77e9
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0893
reference_id CVE-2022-0893
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0893
5
reference_url https://github.com/advisories/GHSA-g795-4hxx-qqwm
reference_id GHSA-g795-4hxx-qqwm
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-g795-4hxx-qqwm
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
1
url pkg:composer/pimcore/pimcore@10.4.0
purl pkg:composer/pimcore/pimcore@10.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u1gy-kwn1-3fgv
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.4.0
aliases CVE-2022-0893, GHSA-g795-4hxx-qqwm
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6z66-zt5u-ybbc
22
url VCID-7191-wmtq-7fdg
vulnerability_id VCID-7191-wmtq-7fdg
summary Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2336
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01587
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2336
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-hg77-vx9v-f49x
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-hg77-vx9v-f49x
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2336
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2336
3
reference_url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4
reference_id 498cadec2292f7842fb10612068ac78496e884b4
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:58Z/
url https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4
4
reference_url https://huntr.dev/bounties/af764624-7746-4f53-8480-85348dbb4f14
reference_id af764624-7746-4f53-8480-85348dbb4f14
reference_type
scores
0
value 5.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:50:58Z/
url https://huntr.dev/bounties/af764624-7746-4f53-8480-85348dbb4f14
5
reference_url https://github.com/advisories/GHSA-hg77-vx9v-f49x
reference_id GHSA-hg77-vx9v-f49x
reference_type
scores
url https://github.com/advisories/GHSA-hg77-vx9v-f49x
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2336, GHSA-hg77-vx9v-f49x
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7191-wmtq-7fdg
23
url VCID-79ph-2nu8-4bhf
vulnerability_id VCID-79ph-2nu8-4bhf
summary 
Cross Site Scripting (XSS) in Model\DataObject\Data\UrlSlug
### Impact
An attacker can use XSS to send a malicious script to an unsuspecting user.

### Patches
Update to version 10.5.17 or apply this patch manually https://github.com/pimcore/pimcore/pull/14301.patch

### Workarounds
Apply https://github.com/pimcore/pimcore/pull/14301.patch manually.

### References
https://huntr.dev/bounties/75bc7d07-46a7-4ed9-a405-af4fc47fb422/
references
0
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-76r7-h46w-463r
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-76r7-h46w-463r
1
reference_url https://github.com/advisories/GHSA-76r7-h46w-463r
reference_id GHSA-76r7-h46w-463r
reference_type
scores
url https://github.com/advisories/GHSA-76r7-h46w-463r
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.17
purl pkg:composer/pimcore/pimcore@10.5.17
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8d6u-y4zg-7bbq
17
vulnerability VCID-8jqk-yf3u-a3gn
18
vulnerability VCID-9d5s-3c9u-c7gg
19
vulnerability VCID-a9r6-chrk-9ffe
20
vulnerability VCID-afta-wcuy-4kah
21
vulnerability VCID-b4ba-atzn-wkay
22
vulnerability VCID-e793-c5wh-yuaf
23
vulnerability VCID-fcm6-y2yu-2uca
24
vulnerability VCID-hjs3-9b5k-e7c4
25
vulnerability VCID-hsfu-wneb-1kb3
26
vulnerability VCID-j76y-vhb3-4kc8
27
vulnerability VCID-kq1j-jfjz-7yb2
28
vulnerability VCID-mmg6-qgw8-uffr
29
vulnerability VCID-nsv2-svcf-83f1
30
vulnerability VCID-nyrx-zsbe-23g8
31
vulnerability VCID-p5rs-jqqj-dudg
32
vulnerability VCID-puqv-p29k-6bhv
33
vulnerability VCID-pvq6-vk11-6qdp
34
vulnerability VCID-pvqw-sqms-aqg6
35
vulnerability VCID-pxg6-wvup-gkhb
36
vulnerability VCID-r243-r7yh-93d1
37
vulnerability VCID-rq96-5ke4-kqcd
38
vulnerability VCID-rxn9-7h5z-pyfm
39
vulnerability VCID-sycr-3zm4-n7hm
40
vulnerability VCID-tcfq-uejs-nqbz
41
vulnerability VCID-tpw6-n6zr-tkcc
42
vulnerability VCID-u34s-hhf3-uyfy
43
vulnerability VCID-uct4-qg7n-fuh1
44
vulnerability VCID-usku-z4hw-23dn
45
vulnerability VCID-xrdb-kuj9-yffv
46
vulnerability VCID-xxfx-xxax-g3g2
47
vulnerability VCID-ygzv-hrfh-47gr
48
vulnerability VCID-ypv8-jnky-vkc4
49
vulnerability VCID-zgrb-9ta2-pqgu
50
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.17
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases GHSA-76r7-h46w-463r, GMS-2023-363
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-79ph-2nu8-4bhf
24
url VCID-7kzv-g2ns-e7gr
vulnerability_id VCID-7kzv-g2ns-e7gr
summary Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0565
reference_id
reference_type
scores
0
value 0.00053
scoring_system epss
scoring_elements 0.16924
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0565
1
reference_url https://github.com/pimcore/pimcore/commit/7697f709a501860144352696e583a2533a6e1245
reference_id 7697f709a501860144352696e583a2533a6e1245
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T19:16:12Z/
url https://github.com/pimcore/pimcore/commit/7697f709a501860144352696e583a2533a6e1245
2
reference_url https://huntr.dev/bounties/b0b29656-4bbe-41cf-92f6-8579df0b6de5
reference_id b0b29656-4bbe-41cf-92f6-8579df0b6de5
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-19T19:16:12Z/
url https://huntr.dev/bounties/b0b29656-4bbe-41cf-92f6-8579df0b6de5
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0565
reference_id CVE-2022-0565
reference_type
scores
0
value 6.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0565
4
reference_url https://github.com/advisories/GHSA-h9vc-2p9g-63gp
reference_id GHSA-h9vc-2p9g-63gp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-h9vc-2p9g-63gp
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
aliases CVE-2022-0565, GHSA-h9vc-2p9g-63gp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7kzv-g2ns-e7gr
25
url VCID-7rvk-x76k-rkex
vulnerability_id VCID-7rvk-x76k-rkex
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1515
reference_id
reference_type
scores
0
value 0.00016
scoring_system epss
scoring_elements 0.03918
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1515
1
reference_url https://github.com/pimcore/pimcore/pull/14562
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14562
2
reference_url https://github.com/pimcore/pimcore/pull/14562.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14562.patch
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-66cm-c7ch-5j8q
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-66cm-c7ch-5j8q
4
reference_url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282/
reference_id
reference_type
scores
url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282/
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1515
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1515
6
reference_url https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964
reference_id 44c6b37aa649a0e3105fa41f3d74a3e511acf964
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:23:15Z/
url https://github.com/pimcore/pimcore/commit/44c6b37aa649a0e3105fa41f3d74a3e511acf964
7
reference_url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282
reference_id ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:23:15Z/
url https://huntr.dev/bounties/ae0f2ec4-a245-4d0b-9d4d-bd8310dd6282
8
reference_url https://github.com/advisories/GHSA-66cm-c7ch-5j8q
reference_id GHSA-66cm-c7ch-5j8q
reference_type
scores
url https://github.com/advisories/GHSA-66cm-c7ch-5j8q
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1515, GHSA-66cm-c7ch-5j8q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-7rvk-x76k-rkex
26
url VCID-843n-ga86-syg7
vulnerability_id VCID-843n-ga86-syg7
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1578
reference_id
reference_type
scores
0
value 0.03609
scoring_system epss
scoring_elements 0.88053
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1578
1
reference_url https://github.com/pimcore/pimcore/pull/14538
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14538
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-42c3-wvww-gcqj
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-42c3-wvww-gcqj
3
reference_url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e/
reference_id
reference_type
scores
url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e/
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1578
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1578
5
reference_url https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2
reference_id 367b74488808d71ec3f66f4ca9e8df5217c2c8d2
reference_type
scores
0
value 6.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-25T19:51:39Z/
url https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2
6
reference_url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e
reference_id 7e441a14-8e55-4ab4-932c-4dc56bb1bc2e
reference_type
scores
0
value 6.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-25T19:51:39Z/
url https://huntr.dev/bounties/7e441a14-8e55-4ab4-932c-4dc56bb1bc2e
7
reference_url https://github.com/advisories/GHSA-42c3-wvww-gcqj
reference_id GHSA-42c3-wvww-gcqj
reference_type
scores
url https://github.com/advisories/GHSA-42c3-wvww-gcqj
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1578, GHSA-42c3-wvww-gcqj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-843n-ga86-syg7
27
url VCID-8caz-76fk-x7er
vulnerability_id VCID-8caz-76fk-x7er
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1351
reference_id
reference_type
scores
0
value 0.00025
scoring_system epss
scoring_elements 0.07426
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1351
1
reference_url https://github.com/pimcore/pimcore/commit/8c39a8b8f14dce078b31f61c4da599ca6f8fc7ac
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/8c39a8b8f14dce078b31f61c4da599ca6f8fc7ac
2
reference_url https://huntr.dev/bounties/c23ae6c2-2e53-4bf5-85b0-e90418476615
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/c23ae6c2-2e53-4bf5-85b0-e90418476615
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-1351
reference_id CVE-2022-1351
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-1351
4
reference_url https://github.com/advisories/GHSA-xcr3-4qvr-54rh
reference_id GHSA-xcr3-4qvr-54rh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xcr3-4qvr-54rh
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.4.0
purl pkg:composer/pimcore/pimcore@10.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u1gy-kwn1-3fgv
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.4.0
aliases CVE-2022-1351, GHSA-xcr3-4qvr-54rh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8caz-76fk-x7er
28
url VCID-8d6u-y4zg-7bbq
vulnerability_id VCID-8d6u-y4zg-7bbq
summary Pimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable to path traversal. The impact of this path traversal and arbitrary extension is limited to creation of arbitrary files and appending data to existing files. When combined with the SQL Injection, the exported data `RESTRICTED DIFFUSION 9 / 9` can be controlled and a webshell can be uploaded. Attackers can use that to execute arbitrary PHP code on the server with the permissions of the webserver. Users may upgrade to version 10.5.18 to receive a patch or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30855
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00436
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30855
1
reference_url https://github.com/pimcore/pimcore/commit/7f788fa44bc18bc1c9182c25e26b770a1d30b62f.patch
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/7f788fa44bc18bc1c9182c25e26b770a1d30b62f.patch
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30855
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30855
3
reference_url https://github.com/pimcore/pimcore/pull/14498
reference_id 14498
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T15:07:33Z/
url https://github.com/pimcore/pimcore/pull/14498
4
reference_url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e.patch
reference_id f1d904094700b513c4756904fa2b1e19d08d890e.patch
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T15:07:33Z/
url https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e.patch
5
reference_url https://github.com/advisories/GHSA-g2mc-fqqc-hxg3
reference_id GHSA-g2mc-fqqc-hxg3
reference_type
scores
url https://github.com/advisories/GHSA-g2mc-fqqc-hxg3
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-g2mc-fqqc-hxg3
reference_id GHSA-g2mc-fqqc-hxg3
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-29T15:07:33Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-g2mc-fqqc-hxg3
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-e793-c5wh-yuaf
22
vulnerability VCID-fcm6-y2yu-2uca
23
vulnerability VCID-hjs3-9b5k-e7c4
24
vulnerability VCID-hsfu-wneb-1kb3
25
vulnerability VCID-j76y-vhb3-4kc8
26
vulnerability VCID-kq1j-jfjz-7yb2
27
vulnerability VCID-mmg6-qgw8-uffr
28
vulnerability VCID-nsv2-svcf-83f1
29
vulnerability VCID-nyrx-zsbe-23g8
30
vulnerability VCID-p5rs-jqqj-dudg
31
vulnerability VCID-puqv-p29k-6bhv
32
vulnerability VCID-pvq6-vk11-6qdp
33
vulnerability VCID-r243-r7yh-93d1
34
vulnerability VCID-rq96-5ke4-kqcd
35
vulnerability VCID-rxn9-7h5z-pyfm
36
vulnerability VCID-sycr-3zm4-n7hm
37
vulnerability VCID-tcfq-uejs-nqbz
38
vulnerability VCID-tpw6-n6zr-tkcc
39
vulnerability VCID-uct4-qg7n-fuh1
40
vulnerability VCID-usku-z4hw-23dn
41
vulnerability VCID-xrdb-kuj9-yffv
42
vulnerability VCID-xxfx-xxax-g3g2
43
vulnerability VCID-ygzv-hrfh-47gr
44
vulnerability VCID-ypv8-jnky-vkc4
45
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
aliases CVE-2023-30855, GHSA-g2mc-fqqc-hxg3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8d6u-y4zg-7bbq
29
url VCID-8jqk-yf3u-a3gn
vulnerability_id VCID-8jqk-yf3u-a3gn
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2361
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01578
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2361
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-9xg6-75mh-7x3f
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-9xg6-75mh-7x3f
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2361
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2361
3
reference_url https://huntr.dev/bounties/24d91b83-c3df-48f5-a713-9def733f2de7
reference_id 24d91b83-c3df-48f5-a713-9def733f2de7
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:47:38Z/
url https://huntr.dev/bounties/24d91b83-c3df-48f5-a713-9def733f2de7
4
reference_url https://github.com/pimcore/pimcore/commit/6970649f5d3790a1db9ef4324bece0d4cb95366a
reference_id 6970649f5d3790a1db9ef4324bece0d4cb95366a
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T20:47:38Z/
url https://github.com/pimcore/pimcore/commit/6970649f5d3790a1db9ef4324bece0d4cb95366a
5
reference_url https://github.com/advisories/GHSA-9xg6-75mh-7x3f
reference_id GHSA-9xg6-75mh-7x3f
reference_type
scores
url https://github.com/advisories/GHSA-9xg6-75mh-7x3f
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2361, GHSA-9xg6-75mh-7x3f
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-8jqk-yf3u-a3gn
30
url VCID-9d5s-3c9u-c7gg
vulnerability_id VCID-9d5s-3c9u-c7gg
summary Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2983
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00512
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2983
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-m4mv-rmr7-h5f5
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-m4mv-rmr7-h5f5
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2983
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2983
3
reference_url https://huntr.dev/bounties/6b2f33d3-2fd0-4d2d-ad7b-2c1e2417eeb1
reference_id 6b2f33d3-2fd0-4d2d-ad7b-2c1e2417eeb1
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-10T20:52:11Z/
url https://huntr.dev/bounties/6b2f33d3-2fd0-4d2d-ad7b-2c1e2417eeb1
4
reference_url https://github.com/pimcore/pimcore/commit/c8f37b19c99cd82e4e558857d3e4d5476ea7228a
reference_id c8f37b19c99cd82e4e558857d3e4d5476ea7228a
reference_type
scores
0
value 6.5
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
1
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-01-10T20:52:11Z/
url https://github.com/pimcore/pimcore/commit/c8f37b19c99cd82e4e558857d3e4d5476ea7228a
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.23
purl pkg:composer/pimcore/pimcore@10.5.23
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-hjs3-9b5k-e7c4
4
vulnerability VCID-j76y-vhb3-4kc8
5
vulnerability VCID-p5rs-jqqj-dudg
6
vulnerability VCID-rq96-5ke4-kqcd
7
vulnerability VCID-usku-z4hw-23dn
8
vulnerability VCID-xrdb-kuj9-yffv
9
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.23
aliases CVE-2023-2983, GHSA-m4mv-rmr7-h5f5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-9d5s-3c9u-c7gg
31
url VCID-a9r6-chrk-9ffe
vulnerability_id VCID-a9r6-chrk-9ffe
summary Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1517
reference_id
reference_type
scores
0
value 0.00015
scoring_system epss
scoring_elements 0.03474
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1517
1
reference_url https://github.com/pimcore/pimcore/pull/14631
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14631
2
reference_url https://github.com/pimcore/pimcore/pull/14631.patch
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14631.patch
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-42x8-2v53-pqmj
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-42x8-2v53-pqmj
4
reference_url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d/
reference_id
reference_type
scores
url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d/
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1517
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1517
6
reference_url https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7
reference_id 3a22700dacd8a439cffcb208838a4199e732cff7
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:22:48Z/
url https://github.com/pimcore/pimcore/commit/3a22700dacd8a439cffcb208838a4199e732cff7
7
reference_url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d
reference_id 82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T19:22:48Z/
url https://huntr.dev/bounties/82adf0dd-8ebd-4d15-9f91-6060c8fa5a0d
8
reference_url https://github.com/advisories/GHSA-42x8-2v53-pqmj
reference_id GHSA-42x8-2v53-pqmj
reference_type
scores
url https://github.com/advisories/GHSA-42x8-2v53-pqmj
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1517, GHSA-42x8-2v53-pqmj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-a9r6-chrk-9ffe
32
url VCID-afta-wcuy-4kah
vulnerability_id VCID-afta-wcuy-4kah
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 11.1.0.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-5873
reference_id
reference_type
scores
0
value 4e-05
scoring_system epss
scoring_elements 0.00148
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-5873
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-5873
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-5873
2
reference_url https://huntr.com/bounties/701cfc30-22a1-4c4b-9b2f-885c77c290ce
reference_id 701cfc30-22a1-4c4b-9b2f-885c77c290ce
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-27T20:32:14Z/
url https://huntr.com/bounties/701cfc30-22a1-4c4b-9b2f-885c77c290ce
3
reference_url https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c
reference_id 757375677dc83a44c6c22f26d97452cc5cda5d7c
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-27T20:32:14Z/
url https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c
4
reference_url https://github.com/advisories/GHSA-j59v-hh4p-q92m
reference_id GHSA-j59v-hh4p-q92m
reference_type
scores
url https://github.com/advisories/GHSA-j59v-hh4p-q92m
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.1.0
purl pkg:composer/pimcore/pimcore@11.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-p5rs-jqqj-dudg
2
vulnerability VCID-phk5-1sq4-t3gn
3
vulnerability VCID-wvt7-h158-8kc9
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.1.0
aliases CVE-2023-5873, GHSA-j59v-hh4p-q92m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-afta-wcuy-4kah
33
url VCID-akv1-wzyh-fydj
vulnerability_id VCID-akv1-wzyh-fydj
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0831
reference_id
reference_type
scores
0
value 0.00151
scoring_system epss
scoring_elements 0.35544
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0831
1
reference_url https://github.com/pimcore/pimcore/commit/e786fd44aac46febdbf916ed6c328fbe645d80bf
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/e786fd44aac46febdbf916ed6c328fbe645d80bf
2
reference_url https://huntr.dev/bounties/4152e3a7-27a1-49eb-a6eb-a57506af104f
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/4152e3a7-27a1-49eb-a6eb-a57506af104f
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0831
reference_id CVE-2022-0831
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0831
4
reference_url https://github.com/advisories/GHSA-q67f-3jq4-mww2
reference_id GHSA-q67f-3jq4-mww2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-q67f-3jq4-mww2
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.3
purl pkg:composer/pimcore/pimcore@10.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-b4ba-atzn-wkay
29
vulnerability VCID-bed6-u2ht-dqgs
30
vulnerability VCID-e793-c5wh-yuaf
31
vulnerability VCID-fcm6-y2yu-2uca
32
vulnerability VCID-hdnj-vcx7-e7cw
33
vulnerability VCID-hjs3-9b5k-e7c4
34
vulnerability VCID-hsfu-wneb-1kb3
35
vulnerability VCID-j76y-vhb3-4kc8
36
vulnerability VCID-k9su-rd5b-ubg9
37
vulnerability VCID-kq1j-jfjz-7yb2
38
vulnerability VCID-mmg6-qgw8-uffr
39
vulnerability VCID-mwcv-7yze-jyfe
40
vulnerability VCID-nsv2-svcf-83f1
41
vulnerability VCID-nyrx-zsbe-23g8
42
vulnerability VCID-p5rs-jqqj-dudg
43
vulnerability VCID-puqv-p29k-6bhv
44
vulnerability VCID-pvq6-vk11-6qdp
45
vulnerability VCID-pvqw-sqms-aqg6
46
vulnerability VCID-pxg6-wvup-gkhb
47
vulnerability VCID-r243-r7yh-93d1
48
vulnerability VCID-rq96-5ke4-kqcd
49
vulnerability VCID-rxn9-7h5z-pyfm
50
vulnerability VCID-sw1n-sk71-y7bs
51
vulnerability VCID-sycr-3zm4-n7hm
52
vulnerability VCID-tcfq-uejs-nqbz
53
vulnerability VCID-tpw6-n6zr-tkcc
54
vulnerability VCID-u1gy-kwn1-3fgv
55
vulnerability VCID-u34s-hhf3-uyfy
56
vulnerability VCID-uct4-qg7n-fuh1
57
vulnerability VCID-usku-z4hw-23dn
58
vulnerability VCID-vwzr-xk59-3ue5
59
vulnerability VCID-xrdb-kuj9-yffv
60
vulnerability VCID-xxfx-xxax-g3g2
61
vulnerability VCID-ygzv-hrfh-47gr
62
vulnerability VCID-ypv8-jnky-vkc4
63
vulnerability VCID-zgrb-9ta2-pqgu
64
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.3
aliases CVE-2022-0831, GHSA-q67f-3jq4-mww2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-akv1-wzyh-fydj
34
url VCID-amnn-gf11-7yc2
vulnerability_id VCID-amnn-gf11-7yc2
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0832
reference_id
reference_type
scores
0
value 0.00208
scoring_system epss
scoring_elements 0.43285
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0832
1
reference_url https://huntr.dev/bounties/be450b60-bc8f-4585-96a5-3c4069f1186a
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/be450b60-bc8f-4585-96a5-3c4069f1186a
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0832
reference_id CVE-2022-0832
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0832
3
reference_url https://github.com/advisories/GHSA-6qcc-whgp-pjj2
reference_id GHSA-6qcc-whgp-pjj2
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6qcc-whgp-pjj2
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.3
purl pkg:composer/pimcore/pimcore@10.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-b4ba-atzn-wkay
29
vulnerability VCID-bed6-u2ht-dqgs
30
vulnerability VCID-e793-c5wh-yuaf
31
vulnerability VCID-fcm6-y2yu-2uca
32
vulnerability VCID-hdnj-vcx7-e7cw
33
vulnerability VCID-hjs3-9b5k-e7c4
34
vulnerability VCID-hsfu-wneb-1kb3
35
vulnerability VCID-j76y-vhb3-4kc8
36
vulnerability VCID-k9su-rd5b-ubg9
37
vulnerability VCID-kq1j-jfjz-7yb2
38
vulnerability VCID-mmg6-qgw8-uffr
39
vulnerability VCID-mwcv-7yze-jyfe
40
vulnerability VCID-nsv2-svcf-83f1
41
vulnerability VCID-nyrx-zsbe-23g8
42
vulnerability VCID-p5rs-jqqj-dudg
43
vulnerability VCID-puqv-p29k-6bhv
44
vulnerability VCID-pvq6-vk11-6qdp
45
vulnerability VCID-pvqw-sqms-aqg6
46
vulnerability VCID-pxg6-wvup-gkhb
47
vulnerability VCID-r243-r7yh-93d1
48
vulnerability VCID-rq96-5ke4-kqcd
49
vulnerability VCID-rxn9-7h5z-pyfm
50
vulnerability VCID-sw1n-sk71-y7bs
51
vulnerability VCID-sycr-3zm4-n7hm
52
vulnerability VCID-tcfq-uejs-nqbz
53
vulnerability VCID-tpw6-n6zr-tkcc
54
vulnerability VCID-u1gy-kwn1-3fgv
55
vulnerability VCID-u34s-hhf3-uyfy
56
vulnerability VCID-uct4-qg7n-fuh1
57
vulnerability VCID-usku-z4hw-23dn
58
vulnerability VCID-vwzr-xk59-3ue5
59
vulnerability VCID-xrdb-kuj9-yffv
60
vulnerability VCID-xxfx-xxax-g3g2
61
vulnerability VCID-ygzv-hrfh-47gr
62
vulnerability VCID-ypv8-jnky-vkc4
63
vulnerability VCID-zgrb-9ta2-pqgu
64
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.3
aliases CVE-2022-0832, GHSA-6qcc-whgp-pjj2
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-amnn-gf11-7yc2
35
url VCID-b4ba-atzn-wkay
vulnerability_id VCID-b4ba-atzn-wkay
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1429
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1429
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-3223-w774-99fq
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-3223-w774-99fq
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1429
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1429
3
reference_url https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5
reference_id 7588c336edb24050656111b89d69e69cc9feb5f5
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:15:52Z/
url https://github.com/pimcore/pimcore/commit/7588c336edb24050656111b89d69e69cc9feb5f5
4
reference_url https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f
reference_id e0829fea-e458-47b8-84a3-a74476d9638f
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-26T21:15:52Z/
url https://huntr.dev/bounties/e0829fea-e458-47b8-84a3-a74476d9638f
5
reference_url https://github.com/advisories/GHSA-3223-w774-99fq
reference_id GHSA-3223-w774-99fq
reference_type
scores
url https://github.com/advisories/GHSA-3223-w774-99fq
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-1429, GHSA-3223-w774-99fq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b4ba-atzn-wkay
36
url VCID-bed6-u2ht-dqgs
vulnerability_id VCID-bed6-u2ht-dqgs
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0911
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04213
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0911
1
reference_url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
2
reference_url https://github.com/pimcore/pimcore/pull/11447
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/11447
3
reference_url https://huntr.dev/bounties/b242edb1-b036-4dca-9b53-891494dd7a77
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/b242edb1-b036-4dca-9b53-891494dd7a77
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0911
reference_id CVE-2022-0911
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0911
5
reference_url https://github.com/advisories/GHSA-j29f-m23h-3p8p
reference_id GHSA-j29f-m23h-3p8p
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-j29f-m23h-3p8p
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
1
url pkg:composer/pimcore/pimcore@10.4.0
purl pkg:composer/pimcore/pimcore@10.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u1gy-kwn1-3fgv
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.4.0
aliases CVE-2022-0911, GHSA-j29f-m23h-3p8p
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-bed6-u2ht-dqgs
37
url VCID-c1pt-5z3d-wffr
vulnerability_id VCID-c1pt-5z3d-wffr
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0894
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01641
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0894
1
reference_url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
2
reference_url https://github.com/pimcore/pimcore/pull/11447
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/11447
3
reference_url https://huntr.dev/bounties/18f8e85e-3cbf-4915-b649-8cffe99daa95
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/18f8e85e-3cbf-4915-b649-8cffe99daa95
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0894
reference_id CVE-2022-0894
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0894
5
reference_url https://github.com/advisories/GHSA-22hc-47cc-7x6f
reference_id GHSA-22hc-47cc-7x6f
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-22hc-47cc-7x6f
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
1
url pkg:composer/pimcore/pimcore@10.4.0
purl pkg:composer/pimcore/pimcore@10.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u1gy-kwn1-3fgv
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.4.0
aliases CVE-2022-0894, GHSA-22hc-47cc-7x6f
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-c1pt-5z3d-wffr
38
url VCID-cgxg-fxyp-dfd8
vulnerability_id VCID-cgxg-fxyp-dfd8
summary pimcore is vulnerable to SQL Injection
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0258
reference_id
reference_type
scores
0
value 0.00032
scoring_system epss
scoring_elements 0.09775
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0258
1
reference_url https://github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd
2
reference_url https://huntr.dev/bounties/0df891e4-6412-4d9a-a9b7-d9df50311802
reference_id
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/0df891e4-6412-4d9a-a9b7-d9df50311802
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0258
reference_id CVE-2022-0258
reference_type
scores
0
value 8.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0258
4
reference_url https://github.com/advisories/GHSA-vj9x-w7ch-f46p
reference_id GHSA-vj9x-w7ch-f46p
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-vj9x-w7ch-f46p
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.8
purl pkg:composer/pimcore/pimcore@10.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-hzjc-d8zw-5bbf
43
vulnerability VCID-j76y-vhb3-4kc8
44
vulnerability VCID-k9su-rd5b-ubg9
45
vulnerability VCID-kq1j-jfjz-7yb2
46
vulnerability VCID-mmg6-qgw8-uffr
47
vulnerability VCID-mwcv-7yze-jyfe
48
vulnerability VCID-nsv2-svcf-83f1
49
vulnerability VCID-nyrx-zsbe-23g8
50
vulnerability VCID-p5rs-jqqj-dudg
51
vulnerability VCID-puqv-p29k-6bhv
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.8
1
url pkg:composer/pimcore/pimcore@10.2.9
purl pkg:composer/pimcore/pimcore@10.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvba-dkzz-xfc4
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.9
aliases CVE-2022-0258, GHSA-vj9x-w7ch-f46p
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cgxg-fxyp-dfd8
39
url VCID-cr87-arup-w3gs
vulnerability_id VCID-cr87-arup-w3gs
summary Cross-site Scripting in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4084
reference_id
reference_type
scores
0
value 0.00025
scoring_system epss
scoring_elements 0.07553
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4084
1
reference_url https://github.com/pimcore/pimcore/commit/3c2a14e676a57e5d77a16255965988eef48f9065
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/3c2a14e676a57e5d77a16255965988eef48f9065
2
reference_url https://huntr.dev/bounties/dcb37f19-ba53-4498-b953-d21999279266
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/dcb37f19-ba53-4498-b953-d21999279266
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4084
reference_id CVE-2021-4084
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4084
4
reference_url https://github.com/advisories/GHSA-8w3x-r6x7-c5r5
reference_id GHSA-8w3x-r6x7-c5r5
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8w3x-r6x7-c5r5
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.6
purl pkg:composer/pimcore/pimcore@10.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-eqbu-bpgy-1yd3
39
vulnerability VCID-f189-dkah-2ke1
40
vulnerability VCID-fcm6-y2yu-2uca
41
vulnerability VCID-gf98-8eeb-afc5
42
vulnerability VCID-ha9j-gnw7-rucq
43
vulnerability VCID-hdnj-vcx7-e7cw
44
vulnerability VCID-hjs3-9b5k-e7c4
45
vulnerability VCID-hsfu-wneb-1kb3
46
vulnerability VCID-hzjc-d8zw-5bbf
47
vulnerability VCID-j76y-vhb3-4kc8
48
vulnerability VCID-k9su-rd5b-ubg9
49
vulnerability VCID-kq1j-jfjz-7yb2
50
vulnerability VCID-mhbd-nf8m-vfgf
51
vulnerability VCID-mmg6-qgw8-uffr
52
vulnerability VCID-mwcv-7yze-jyfe
53
vulnerability VCID-nsv2-svcf-83f1
54
vulnerability VCID-nyrx-zsbe-23g8
55
vulnerability VCID-p5rs-jqqj-dudg
56
vulnerability VCID-puqv-p29k-6bhv
57
vulnerability VCID-pvq6-vk11-6qdp
58
vulnerability VCID-pvqw-sqms-aqg6
59
vulnerability VCID-pxg6-wvup-gkhb
60
vulnerability VCID-r243-r7yh-93d1
61
vulnerability VCID-rq96-5ke4-kqcd
62
vulnerability VCID-rxn9-7h5z-pyfm
63
vulnerability VCID-sft8-4vjf-4ygm
64
vulnerability VCID-svwv-hc14-bfhj
65
vulnerability VCID-sw1n-sk71-y7bs
66
vulnerability VCID-sycr-3zm4-n7hm
67
vulnerability VCID-tcfq-uejs-nqbz
68
vulnerability VCID-tpw6-n6zr-tkcc
69
vulnerability VCID-u1gy-kwn1-3fgv
70
vulnerability VCID-u34s-hhf3-uyfy
71
vulnerability VCID-uct4-qg7n-fuh1
72
vulnerability VCID-ukcy-nczn-rfhz
73
vulnerability VCID-usku-z4hw-23dn
74
vulnerability VCID-vwzr-xk59-3ue5
75
vulnerability VCID-xrdb-kuj9-yffv
76
vulnerability VCID-xxfx-xxax-g3g2
77
vulnerability VCID-ygzv-hrfh-47gr
78
vulnerability VCID-ypv8-jnky-vkc4
79
vulnerability VCID-zgrb-9ta2-pqgu
80
vulnerability VCID-zxa3-m253-gug3
81
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.6
aliases CVE-2021-4084, GHSA-8w3x-r6x7-c5r5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cr87-arup-w3gs
40
url VCID-d73k-kkeb-n3b5
vulnerability_id VCID-d73k-kkeb-n3b5
summary Business Logic Errors in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4146
reference_id
reference_type
scores
0
value 0.0001
scoring_system epss
scoring_elements 0.01087
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4146
1
reference_url https://github.com/pimcore/pimcore/commit/7011922f7f0f97a82d8c378559b91fcdb34604a6
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/7011922f7f0f97a82d8c378559b91fcdb34604a6
2
reference_url https://github.com/pimcore/pimcore/issues/11024
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/issues/11024
3
reference_url https://github.com/pimcore/pimcore/pull/11206
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/11206
4
reference_url https://huntr.dev/bounties/47b37054-cafe-4f48-8b40-c86efc7fb760
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/47b37054-cafe-4f48-8b40-c86efc7fb760
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4146
reference_id CVE-2021-4146
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4146
6
reference_url https://github.com/advisories/GHSA-54hw-mhgh-x4vc
reference_id GHSA-54hw-mhgh-x4vc
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-54hw-mhgh-x4vc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.6
purl pkg:composer/pimcore/pimcore@10.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-eqbu-bpgy-1yd3
39
vulnerability VCID-f189-dkah-2ke1
40
vulnerability VCID-fcm6-y2yu-2uca
41
vulnerability VCID-gf98-8eeb-afc5
42
vulnerability VCID-ha9j-gnw7-rucq
43
vulnerability VCID-hdnj-vcx7-e7cw
44
vulnerability VCID-hjs3-9b5k-e7c4
45
vulnerability VCID-hsfu-wneb-1kb3
46
vulnerability VCID-hzjc-d8zw-5bbf
47
vulnerability VCID-j76y-vhb3-4kc8
48
vulnerability VCID-k9su-rd5b-ubg9
49
vulnerability VCID-kq1j-jfjz-7yb2
50
vulnerability VCID-mhbd-nf8m-vfgf
51
vulnerability VCID-mmg6-qgw8-uffr
52
vulnerability VCID-mwcv-7yze-jyfe
53
vulnerability VCID-nsv2-svcf-83f1
54
vulnerability VCID-nyrx-zsbe-23g8
55
vulnerability VCID-p5rs-jqqj-dudg
56
vulnerability VCID-puqv-p29k-6bhv
57
vulnerability VCID-pvq6-vk11-6qdp
58
vulnerability VCID-pvqw-sqms-aqg6
59
vulnerability VCID-pxg6-wvup-gkhb
60
vulnerability VCID-r243-r7yh-93d1
61
vulnerability VCID-rq96-5ke4-kqcd
62
vulnerability VCID-rxn9-7h5z-pyfm
63
vulnerability VCID-sft8-4vjf-4ygm
64
vulnerability VCID-svwv-hc14-bfhj
65
vulnerability VCID-sw1n-sk71-y7bs
66
vulnerability VCID-sycr-3zm4-n7hm
67
vulnerability VCID-tcfq-uejs-nqbz
68
vulnerability VCID-tpw6-n6zr-tkcc
69
vulnerability VCID-u1gy-kwn1-3fgv
70
vulnerability VCID-u34s-hhf3-uyfy
71
vulnerability VCID-uct4-qg7n-fuh1
72
vulnerability VCID-ukcy-nczn-rfhz
73
vulnerability VCID-usku-z4hw-23dn
74
vulnerability VCID-vwzr-xk59-3ue5
75
vulnerability VCID-xrdb-kuj9-yffv
76
vulnerability VCID-xxfx-xxax-g3g2
77
vulnerability VCID-ygzv-hrfh-47gr
78
vulnerability VCID-ypv8-jnky-vkc4
79
vulnerability VCID-zgrb-9ta2-pqgu
80
vulnerability VCID-zxa3-m253-gug3
81
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.6
1
url pkg:composer/pimcore/pimcore@10.2.9
purl pkg:composer/pimcore/pimcore@10.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvba-dkzz-xfc4
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.9
aliases CVE-2021-4146, GHSA-54hw-mhgh-x4vc
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d73k-kkeb-n3b5
41
url VCID-d8pe-27pm-xbfy
vulnerability_id VCID-d8pe-27pm-xbfy
summary pimcore is vulnerable to Cross-Site Request Forgery (CSRF)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4082
reference_id
reference_type
scores
0
value 6e-05
scoring_system epss
scoring_elements 0.00482
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4082
1
reference_url https://github.com/pimcore/pimcore/commit/3088cec7dc3cbc5a8b26f1269e398e799ee7ee28
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/3088cec7dc3cbc5a8b26f1269e398e799ee7ee28
2
reference_url https://huntr.dev/bounties/81838575-e170-41fb-b451-92c1c8aab092
reference_id
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/81838575-e170-41fb-b451-92c1c8aab092
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4082
reference_id CVE-2021-4082
reference_type
scores
0
value 4.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4082
4
reference_url https://github.com/advisories/GHSA-2v2v-fx7r-f2fh
reference_id GHSA-2v2v-fx7r-f2fh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-2v2v-fx7r-f2fh
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.6
purl pkg:composer/pimcore/pimcore@10.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-eqbu-bpgy-1yd3
39
vulnerability VCID-f189-dkah-2ke1
40
vulnerability VCID-fcm6-y2yu-2uca
41
vulnerability VCID-gf98-8eeb-afc5
42
vulnerability VCID-ha9j-gnw7-rucq
43
vulnerability VCID-hdnj-vcx7-e7cw
44
vulnerability VCID-hjs3-9b5k-e7c4
45
vulnerability VCID-hsfu-wneb-1kb3
46
vulnerability VCID-hzjc-d8zw-5bbf
47
vulnerability VCID-j76y-vhb3-4kc8
48
vulnerability VCID-k9su-rd5b-ubg9
49
vulnerability VCID-kq1j-jfjz-7yb2
50
vulnerability VCID-mhbd-nf8m-vfgf
51
vulnerability VCID-mmg6-qgw8-uffr
52
vulnerability VCID-mwcv-7yze-jyfe
53
vulnerability VCID-nsv2-svcf-83f1
54
vulnerability VCID-nyrx-zsbe-23g8
55
vulnerability VCID-p5rs-jqqj-dudg
56
vulnerability VCID-puqv-p29k-6bhv
57
vulnerability VCID-pvq6-vk11-6qdp
58
vulnerability VCID-pvqw-sqms-aqg6
59
vulnerability VCID-pxg6-wvup-gkhb
60
vulnerability VCID-r243-r7yh-93d1
61
vulnerability VCID-rq96-5ke4-kqcd
62
vulnerability VCID-rxn9-7h5z-pyfm
63
vulnerability VCID-sft8-4vjf-4ygm
64
vulnerability VCID-svwv-hc14-bfhj
65
vulnerability VCID-sw1n-sk71-y7bs
66
vulnerability VCID-sycr-3zm4-n7hm
67
vulnerability VCID-tcfq-uejs-nqbz
68
vulnerability VCID-tpw6-n6zr-tkcc
69
vulnerability VCID-u1gy-kwn1-3fgv
70
vulnerability VCID-u34s-hhf3-uyfy
71
vulnerability VCID-uct4-qg7n-fuh1
72
vulnerability VCID-ukcy-nczn-rfhz
73
vulnerability VCID-usku-z4hw-23dn
74
vulnerability VCID-vwzr-xk59-3ue5
75
vulnerability VCID-xrdb-kuj9-yffv
76
vulnerability VCID-xxfx-xxax-g3g2
77
vulnerability VCID-ygzv-hrfh-47gr
78
vulnerability VCID-ypv8-jnky-vkc4
79
vulnerability VCID-zgrb-9ta2-pqgu
80
vulnerability VCID-zxa3-m253-gug3
81
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.6
aliases CVE-2021-4082, GHSA-2v2v-fx7r-f2fh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-d8pe-27pm-xbfy
42
url VCID-e793-c5wh-yuaf
vulnerability_id VCID-e793-c5wh-yuaf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30848
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01545
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30848
1
reference_url https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3.patch
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/25ad8674886f2b938243cbe13e33e204a2e35cc3.patch
2
reference_url https://github.com/pimcore/pimcore/pull/14972
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14972
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-6mhm-gcpf-5gr8
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-6mhm-gcpf-5gr8
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30848
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30848
5
reference_url https://github.com/advisories/GHSA-6mhm-gcpf-5gr8
reference_id GHSA-6mhm-gcpf-5gr8
reference_type
scores
url https://github.com/advisories/GHSA-6mhm-gcpf-5gr8
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30848, GHSA-6mhm-gcpf-5gr8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-e793-c5wh-yuaf
43
url VCID-eqbu-bpgy-1yd3
vulnerability_id VCID-eqbu-bpgy-1yd3
summary Cross-site Scripting in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4139
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.08269
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4139
1
reference_url https://github.com/pimcore/pimcore/commit/d5c3e876d910784000335061c3bd24d301351245
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/d5c3e876d910784000335061c3bd24d301351245
2
reference_url https://huntr.dev/bounties/6ec59e43-095f-4ba3-8b75-e92250da8e3a
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/6ec59e43-095f-4ba3-8b75-e92250da8e3a
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4139
reference_id CVE-2021-4139
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4139
4
reference_url https://github.com/advisories/GHSA-8xx9-rxrj-2m2w
reference_id GHSA-8xx9-rxrj-2m2w
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8xx9-rxrj-2m2w
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.7
purl pkg:composer/pimcore/pimcore@10.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-fcm6-y2yu-2uca
39
vulnerability VCID-gf98-8eeb-afc5
40
vulnerability VCID-ha9j-gnw7-rucq
41
vulnerability VCID-hdnj-vcx7-e7cw
42
vulnerability VCID-hjs3-9b5k-e7c4
43
vulnerability VCID-hsfu-wneb-1kb3
44
vulnerability VCID-hzjc-d8zw-5bbf
45
vulnerability VCID-j76y-vhb3-4kc8
46
vulnerability VCID-k9su-rd5b-ubg9
47
vulnerability VCID-kq1j-jfjz-7yb2
48
vulnerability VCID-mhbd-nf8m-vfgf
49
vulnerability VCID-mmg6-qgw8-uffr
50
vulnerability VCID-mwcv-7yze-jyfe
51
vulnerability VCID-nsv2-svcf-83f1
52
vulnerability VCID-nyrx-zsbe-23g8
53
vulnerability VCID-p5rs-jqqj-dudg
54
vulnerability VCID-puqv-p29k-6bhv
55
vulnerability VCID-pvq6-vk11-6qdp
56
vulnerability VCID-pvqw-sqms-aqg6
57
vulnerability VCID-pxg6-wvup-gkhb
58
vulnerability VCID-r243-r7yh-93d1
59
vulnerability VCID-rq96-5ke4-kqcd
60
vulnerability VCID-rxn9-7h5z-pyfm
61
vulnerability VCID-svwv-hc14-bfhj
62
vulnerability VCID-sw1n-sk71-y7bs
63
vulnerability VCID-sycr-3zm4-n7hm
64
vulnerability VCID-tcfq-uejs-nqbz
65
vulnerability VCID-tpw6-n6zr-tkcc
66
vulnerability VCID-u1gy-kwn1-3fgv
67
vulnerability VCID-u34s-hhf3-uyfy
68
vulnerability VCID-uct4-qg7n-fuh1
69
vulnerability VCID-ukcy-nczn-rfhz
70
vulnerability VCID-usku-z4hw-23dn
71
vulnerability VCID-vwzr-xk59-3ue5
72
vulnerability VCID-xrdb-kuj9-yffv
73
vulnerability VCID-xxfx-xxax-g3g2
74
vulnerability VCID-ygzv-hrfh-47gr
75
vulnerability VCID-ypv8-jnky-vkc4
76
vulnerability VCID-zgrb-9ta2-pqgu
77
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.7
aliases CVE-2021-4139, GHSA-8xx9-rxrj-2m2w
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-eqbu-bpgy-1yd3
44
url VCID-f189-dkah-2ke1
vulnerability_id VCID-f189-dkah-2ke1
summary Cross-site Scripting in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0262
reference_id
reference_type
scores
0
value 0.00044
scoring_system epss
scoring_elements 0.13859
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0262
1
reference_url https://github.com/pimcore/pimcore/commit/6f36e841ce55f67e2e95253dd58f80659ef166c7
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6f36e841ce55f67e2e95253dd58f80659ef166c7
2
reference_url https://huntr.dev/bounties/b38a4e14-5dcb-4e49-9990-494dc2a8fa0d
reference_id
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/b38a4e14-5dcb-4e49-9990-494dc2a8fa0d
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0262
reference_id CVE-2022-0262
reference_type
scores
0
value 6.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0262
4
reference_url https://github.com/advisories/GHSA-4f5x-q4jc-xfcf
reference_id GHSA-4f5x-q4jc-xfcf
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-4f5x-q4jc-xfcf
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.7
purl pkg:composer/pimcore/pimcore@10.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-fcm6-y2yu-2uca
39
vulnerability VCID-gf98-8eeb-afc5
40
vulnerability VCID-ha9j-gnw7-rucq
41
vulnerability VCID-hdnj-vcx7-e7cw
42
vulnerability VCID-hjs3-9b5k-e7c4
43
vulnerability VCID-hsfu-wneb-1kb3
44
vulnerability VCID-hzjc-d8zw-5bbf
45
vulnerability VCID-j76y-vhb3-4kc8
46
vulnerability VCID-k9su-rd5b-ubg9
47
vulnerability VCID-kq1j-jfjz-7yb2
48
vulnerability VCID-mhbd-nf8m-vfgf
49
vulnerability VCID-mmg6-qgw8-uffr
50
vulnerability VCID-mwcv-7yze-jyfe
51
vulnerability VCID-nsv2-svcf-83f1
52
vulnerability VCID-nyrx-zsbe-23g8
53
vulnerability VCID-p5rs-jqqj-dudg
54
vulnerability VCID-puqv-p29k-6bhv
55
vulnerability VCID-pvq6-vk11-6qdp
56
vulnerability VCID-pvqw-sqms-aqg6
57
vulnerability VCID-pxg6-wvup-gkhb
58
vulnerability VCID-r243-r7yh-93d1
59
vulnerability VCID-rq96-5ke4-kqcd
60
vulnerability VCID-rxn9-7h5z-pyfm
61
vulnerability VCID-svwv-hc14-bfhj
62
vulnerability VCID-sw1n-sk71-y7bs
63
vulnerability VCID-sycr-3zm4-n7hm
64
vulnerability VCID-tcfq-uejs-nqbz
65
vulnerability VCID-tpw6-n6zr-tkcc
66
vulnerability VCID-u1gy-kwn1-3fgv
67
vulnerability VCID-u34s-hhf3-uyfy
68
vulnerability VCID-uct4-qg7n-fuh1
69
vulnerability VCID-ukcy-nczn-rfhz
70
vulnerability VCID-usku-z4hw-23dn
71
vulnerability VCID-vwzr-xk59-3ue5
72
vulnerability VCID-xrdb-kuj9-yffv
73
vulnerability VCID-xxfx-xxax-g3g2
74
vulnerability VCID-ygzv-hrfh-47gr
75
vulnerability VCID-ypv8-jnky-vkc4
76
vulnerability VCID-zgrb-9ta2-pqgu
77
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.7
aliases CVE-2022-0262, GHSA-4f5x-q4jc-xfcf
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-f189-dkah-2ke1
45
url VCID-fcm6-y2yu-2uca
vulnerability_id VCID-fcm6-y2yu-2uca
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28106
reference_id
reference_type
scores
0
value 0.0007
scoring_system epss
scoring_elements 0.21598
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28106
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28106
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28106
2
reference_url https://github.com/pimcore/pimcore/pull/14669.patch
reference_id 14669.patch
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://github.com/pimcore/pimcore/pull/14669.patch
3
reference_url https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2
reference_id c59d0bf1d03a5037b586fe06230694fa3818dbf2
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2
4
reference_url https://huntr.dev/bounties/fa77d780-9b23-404b-8c44-12108881d11a
reference_id fa77d780-9b23-404b-8c44-12108881d11a
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://huntr.dev/bounties/fa77d780-9b23-404b-8c44-12108881d11a
5
reference_url https://github.com/advisories/GHSA-x5j3-mq9g-8jc8
reference_id GHSA-x5j3-mq9g-8jc8
reference_type
scores
url https://github.com/advisories/GHSA-x5j3-mq9g-8jc8
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8
reference_id GHSA-x5j3-mq9g-8jc8
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:29:14Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28106, GHSA-x5j3-mq9g-8jc8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-fcm6-y2yu-2uca
46
url VCID-gf98-8eeb-afc5
vulnerability_id VCID-gf98-8eeb-afc5
summary Cross-site Scripting pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0510
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.1276
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0510
1
reference_url https://github.com/pimcore/pimcore/commit/b5a9ad65e5a4dde1916f02019f8686ad835681ce
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/b5a9ad65e5a4dde1916f02019f8686ad835681ce
2
reference_url https://huntr.dev/bounties/bb3525d5-dedc-48b8-ab04-ad4c72499abe
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/bb3525d5-dedc-48b8-ab04-ad4c72499abe
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0510
reference_id CVE-2022-0510
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0510
4
reference_url https://github.com/advisories/GHSA-mxh3-2699-98g9
reference_id GHSA-mxh3-2699-98g9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mxh3-2699-98g9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
aliases CVE-2022-0510, GHSA-mxh3-2699-98g9
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-gf98-8eeb-afc5
47
url VCID-ha9j-gnw7-rucq
vulnerability_id VCID-ha9j-gnw7-rucq
summary pimcore is vulnerable to Cross-site Scripting
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0256
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01693
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0256
1
reference_url https://github.com/pimcore/pimcore/commit/dff1cb0c466abcd55f1268934de3ed937b7436a7
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/dff1cb0c466abcd55f1268934de3ed937b7436a7
2
reference_url https://huntr.dev/bounties/8d88e48a-7124-4aaf-9f1d-6cfe4f9a79c1
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/8d88e48a-7124-4aaf-9f1d-6cfe4f9a79c1
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0256
reference_id CVE-2022-0256
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0256
4
reference_url https://github.com/advisories/GHSA-57hg-26h7-9qgv
reference_id GHSA-57hg-26h7-9qgv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-57hg-26h7-9qgv
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.8
purl pkg:composer/pimcore/pimcore@10.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-hzjc-d8zw-5bbf
43
vulnerability VCID-j76y-vhb3-4kc8
44
vulnerability VCID-k9su-rd5b-ubg9
45
vulnerability VCID-kq1j-jfjz-7yb2
46
vulnerability VCID-mmg6-qgw8-uffr
47
vulnerability VCID-mwcv-7yze-jyfe
48
vulnerability VCID-nsv2-svcf-83f1
49
vulnerability VCID-nyrx-zsbe-23g8
50
vulnerability VCID-p5rs-jqqj-dudg
51
vulnerability VCID-puqv-p29k-6bhv
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.8
1
url pkg:composer/pimcore/pimcore@10.2.9
purl pkg:composer/pimcore/pimcore@10.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvba-dkzz-xfc4
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.9
aliases CVE-2022-0256, GHSA-57hg-26h7-9qgv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ha9j-gnw7-rucq
48
url VCID-hdnj-vcx7-e7cw
vulnerability_id VCID-hdnj-vcx7-e7cw
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-0323
reference_id
reference_type
scores
0
value 5e-05
scoring_system epss
scoring_elements 0.00212
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-0323
1
reference_url https://github.com/pimcore/pimcore/pull/13916.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/13916.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-6vf6-g3pr-j83h
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-6vf6-g3pr-j83h
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-0323
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-0323
4
reference_url https://huntr.dev/bounties/129d6a4b-0504-4de1-a72c-3f12c4552343
reference_id 129d6a4b-0504-4de1-a72c-3f12c4552343
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-07T15:07:52Z/
url https://huntr.dev/bounties/129d6a4b-0504-4de1-a72c-3f12c4552343
5
reference_url https://github.com/pimcore/pimcore/commit/746fac1a342841624f63ab13edcd340358e1bc04
reference_id 746fac1a342841624f63ab13edcd340358e1bc04
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-07T15:07:52Z/
url https://github.com/pimcore/pimcore/commit/746fac1a342841624f63ab13edcd340358e1bc04
6
reference_url https://github.com/advisories/GHSA-6vf6-g3pr-j83h
reference_id GHSA-6vf6-g3pr-j83h
reference_type
scores
url https://github.com/advisories/GHSA-6vf6-g3pr-j83h
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.14
purl pkg:composer/pimcore/pimcore@10.5.14
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-79ph-2nu8-4bhf
15
vulnerability VCID-7rvk-x76k-rkex
16
vulnerability VCID-843n-ga86-syg7
17
vulnerability VCID-8d6u-y4zg-7bbq
18
vulnerability VCID-8jqk-yf3u-a3gn
19
vulnerability VCID-9d5s-3c9u-c7gg
20
vulnerability VCID-a9r6-chrk-9ffe
21
vulnerability VCID-afta-wcuy-4kah
22
vulnerability VCID-b4ba-atzn-wkay
23
vulnerability VCID-e793-c5wh-yuaf
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-hjs3-9b5k-e7c4
26
vulnerability VCID-hsfu-wneb-1kb3
27
vulnerability VCID-j76y-vhb3-4kc8
28
vulnerability VCID-kq1j-jfjz-7yb2
29
vulnerability VCID-mmg6-qgw8-uffr
30
vulnerability VCID-mwcv-7yze-jyfe
31
vulnerability VCID-nsv2-svcf-83f1
32
vulnerability VCID-nyrx-zsbe-23g8
33
vulnerability VCID-p5rs-jqqj-dudg
34
vulnerability VCID-puqv-p29k-6bhv
35
vulnerability VCID-pvq6-vk11-6qdp
36
vulnerability VCID-pvqw-sqms-aqg6
37
vulnerability VCID-pxg6-wvup-gkhb
38
vulnerability VCID-r243-r7yh-93d1
39
vulnerability VCID-rq96-5ke4-kqcd
40
vulnerability VCID-rxn9-7h5z-pyfm
41
vulnerability VCID-sycr-3zm4-n7hm
42
vulnerability VCID-tcfq-uejs-nqbz
43
vulnerability VCID-tpw6-n6zr-tkcc
44
vulnerability VCID-u34s-hhf3-uyfy
45
vulnerability VCID-uct4-qg7n-fuh1
46
vulnerability VCID-usku-z4hw-23dn
47
vulnerability VCID-xrdb-kuj9-yffv
48
vulnerability VCID-xxfx-xxax-g3g2
49
vulnerability VCID-ygzv-hrfh-47gr
50
vulnerability VCID-ypv8-jnky-vkc4
51
vulnerability VCID-zgrb-9ta2-pqgu
52
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.14
aliases CVE-2023-0323, GHSA-6vf6-g3pr-j83h
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hdnj-vcx7-e7cw
49
url VCID-hjs3-9b5k-e7c4
vulnerability_id VCID-hjs3-9b5k-e7c4
summary 
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce. A path traversal vulnerability exists in the `AssetController::importServerFilesAction`, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.This can lead to potential denial of service---key file overwrite.
The impact of this vulnerability allows attackers to: overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information. This could also cause a denial of service (DoS) if critical system files are overwritten or deleted.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-38708
reference_id
reference_type
scores
0
value 4e-05
scoring_system epss
scoring_elements 0.00208
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-38708
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-38708
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-38708
2
reference_url https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c
reference_id 58012d0e3b8b926fb54eccbd64ec5c993b30c22c
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-03T18:21:04Z/
url https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-34hj-v8fm-x887
reference_id GHSA-34hj-v8fm-x887
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-03T18:21:04Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-34hj-v8fm-x887
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.7
purl pkg:composer/pimcore/pimcore@10.6.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-p5rs-jqqj-dudg
3
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.7
aliases CVE-2023-38708, GHSA-34hj-v8fm-x887
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hjs3-9b5k-e7c4
50
url VCID-hmq1-yjsd-5fah
vulnerability_id VCID-hmq1-yjsd-5fah
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-39170
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.07988
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-39170
1
reference_url https://github.com/pimcore/pimcore/pull/10178
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/10178
2
reference_url https://github.com/pimcore/pimcore/pull/10178.patch
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/10178.patch
3
reference_url https://github.com/pimcore/pimcore/pull/10206
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/10206
4
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-2v88-qq7x-xq5f
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-2v88-qq7x-xq5f
5
reference_url https://huntr.dev/bounties/c3e4cf79-a4b5-4982-af27-729f66281501
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/c3e4cf79-a4b5-4982-af27-729f66281501
6
reference_url https://huntr.dev/bounties/e4cb9cd8-89cf-427c-8d2e-37ca40099bf2
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/e4cb9cd8-89cf-427c-8d2e-37ca40099bf2
7
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-39170
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-39170
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.1.2
purl pkg:composer/pimcore/pimcore@10.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-cr87-arup-w3gs
38
vulnerability VCID-d73k-kkeb-n3b5
39
vulnerability VCID-d8pe-27pm-xbfy
40
vulnerability VCID-e793-c5wh-yuaf
41
vulnerability VCID-eqbu-bpgy-1yd3
42
vulnerability VCID-f189-dkah-2ke1
43
vulnerability VCID-fcm6-y2yu-2uca
44
vulnerability VCID-gf98-8eeb-afc5
45
vulnerability VCID-ha9j-gnw7-rucq
46
vulnerability VCID-hdnj-vcx7-e7cw
47
vulnerability VCID-hjs3-9b5k-e7c4
48
vulnerability VCID-hsfu-wneb-1kb3
49
vulnerability VCID-hzjc-d8zw-5bbf
50
vulnerability VCID-j76y-vhb3-4kc8
51
vulnerability VCID-k9su-rd5b-ubg9
52
vulnerability VCID-kq1j-jfjz-7yb2
53
vulnerability VCID-mhbd-nf8m-vfgf
54
vulnerability VCID-mmg6-qgw8-uffr
55
vulnerability VCID-mwcv-7yze-jyfe
56
vulnerability VCID-nsv2-svcf-83f1
57
vulnerability VCID-nyrx-zsbe-23g8
58
vulnerability VCID-p5rs-jqqj-dudg
59
vulnerability VCID-puqv-p29k-6bhv
60
vulnerability VCID-pvba-dkzz-xfc4
61
vulnerability VCID-pvq6-vk11-6qdp
62
vulnerability VCID-pvqw-sqms-aqg6
63
vulnerability VCID-pxg6-wvup-gkhb
64
vulnerability VCID-r243-r7yh-93d1
65
vulnerability VCID-rq96-5ke4-kqcd
66
vulnerability VCID-rxn9-7h5z-pyfm
67
vulnerability VCID-sft8-4vjf-4ygm
68
vulnerability VCID-svwv-hc14-bfhj
69
vulnerability VCID-sw1n-sk71-y7bs
70
vulnerability VCID-sycr-3zm4-n7hm
71
vulnerability VCID-tcfq-uejs-nqbz
72
vulnerability VCID-tpw6-n6zr-tkcc
73
vulnerability VCID-u1gy-kwn1-3fgv
74
vulnerability VCID-u34s-hhf3-uyfy
75
vulnerability VCID-uct4-qg7n-fuh1
76
vulnerability VCID-ukcy-nczn-rfhz
77
vulnerability VCID-usku-z4hw-23dn
78
vulnerability VCID-vwzr-xk59-3ue5
79
vulnerability VCID-wbbu-rkkp-ebbj
80
vulnerability VCID-xrdb-kuj9-yffv
81
vulnerability VCID-xxfx-xxax-g3g2
82
vulnerability VCID-y9m4-cwvv-mbhe
83
vulnerability VCID-ygzv-hrfh-47gr
84
vulnerability VCID-ypv8-jnky-vkc4
85
vulnerability VCID-zbvh-bt4c-e3em
86
vulnerability VCID-zgrb-9ta2-pqgu
87
vulnerability VCID-zxa3-m253-gug3
88
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.1.2
aliases CVE-2021-39170, GHSA-2v88-qq7x-xq5f
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hmq1-yjsd-5fah
51
url VCID-hsfu-wneb-1kb3
vulnerability_id VCID-hsfu-wneb-1kb3
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2630
reference_id
reference_type
scores
0
value 0.0001
scoring_system epss
scoring_elements 0.01276
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2630
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-w766-3572-f2hv
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-w766-3572-f2hv
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2630
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2630
3
reference_url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38
reference_id 7e32cc28145274ddfc30fb791012d26c1278bd38
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:39:45Z/
url https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38
4
reference_url https://huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e
reference_id e1001870-b8d8-4921-8b9c-bbdfb1a1491e
reference_type
scores
0
value 5.7
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:39:45Z/
url https://huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e
5
reference_url https://github.com/advisories/GHSA-w766-3572-f2hv
reference_id GHSA-w766-3572-f2hv
reference_type
scores
url https://github.com/advisories/GHSA-w766-3572-f2hv
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2630, GHSA-w766-3572-f2hv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hsfu-wneb-1kb3
52
url VCID-hzjc-d8zw-5bbf
vulnerability_id VCID-hzjc-d8zw-5bbf
summary Cross-site Scripting in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0285
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.14548
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0285
1
reference_url https://github.com/pimcore/pimcore/commit/b432225952e2a5ab0268f401b85a14480369b835
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/b432225952e2a5ab0268f401b85a14480369b835
2
reference_url https://huntr.dev/bounties/321918b2-aa01-410e-9f7c-dca5f286bc9c
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/321918b2-aa01-410e-9f7c-dca5f286bc9c
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0285
reference_id CVE-2022-0285
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0285
4
reference_url https://github.com/advisories/GHSA-pm3v-qxf6-fgxv
reference_id GHSA-pm3v-qxf6-fgxv
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pm3v-qxf6-fgxv
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.9
purl pkg:composer/pimcore/pimcore@10.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvba-dkzz-xfc4
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.9
aliases CVE-2022-0285, GHSA-pm3v-qxf6-fgxv
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-hzjc-d8zw-5bbf
53
url VCID-j76y-vhb3-4kc8
vulnerability_id VCID-j76y-vhb3-4kc8
summary Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3819
reference_id
reference_type
scores
0
value 2e-05
scoring_system epss
scoring_elements 0.00059
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3819
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-r87r-982q-2c3q
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-r87r-982q-2c3q
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3819
reference_id
reference_type
scores
0
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3819
3
reference_url https://github.com/pimcore/pimcore/commit/0237527b3244d251fa5ecd4912dfe4f8b2125c54
reference_id 0237527b3244d251fa5ecd4912dfe4f8b2125c54
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:38:48Z/
url https://github.com/pimcore/pimcore/commit/0237527b3244d251fa5ecd4912dfe4f8b2125c54
4
reference_url https://huntr.dev/bounties/be5e4d4c-1b0b-4c01-a1fc-00533135817c
reference_id be5e4d4c-1b0b-4c01-a1fc-00533135817c
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 7.6
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:38:48Z/
url https://huntr.dev/bounties/be5e4d4c-1b0b-4c01-a1fc-00533135817c
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-hjs3-9b5k-e7c4
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3819, GHSA-r87r-982q-2c3q
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j76y-vhb3-4kc8
54
url VCID-k9su-rd5b-ubg9
vulnerability_id VCID-k9su-rd5b-ubg9
summary SQL Injection in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1339
reference_id
reference_type
scores
0
value 0.00049
scoring_system epss
scoring_elements 0.15714
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1339
1
reference_url https://github.com/pimcore/pimcore/commit/adae3be64427466bf0df15ceaea2ac30da93752c
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/adae3be64427466bf0df15ceaea2ac30da93752c
2
reference_url https://huntr.dev/bounties/ae8dc737-844e-40da-a9f7-e72d8e50f6f9
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/ae8dc737-844e-40da-a9f7-e72d8e50f6f9
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-1339
reference_id CVE-2022-1339
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-1339
4
reference_url https://github.com/advisories/GHSA-mj2c-5mjv-gmmj
reference_id GHSA-mj2c-5mjv-gmmj
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-mj2c-5mjv-gmmj
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.5
purl pkg:composer/pimcore/pimcore@10.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-6286-wv98-9uht
14
vulnerability VCID-6etn-5u58-sqgg
15
vulnerability VCID-6fw4-9qqw-bqen
16
vulnerability VCID-6uw7-89nn-tkg3
17
vulnerability VCID-7191-wmtq-7fdg
18
vulnerability VCID-79ph-2nu8-4bhf
19
vulnerability VCID-7rvk-x76k-rkex
20
vulnerability VCID-843n-ga86-syg7
21
vulnerability VCID-8caz-76fk-x7er
22
vulnerability VCID-8d6u-y4zg-7bbq
23
vulnerability VCID-8jqk-yf3u-a3gn
24
vulnerability VCID-9d5s-3c9u-c7gg
25
vulnerability VCID-a9r6-chrk-9ffe
26
vulnerability VCID-afta-wcuy-4kah
27
vulnerability VCID-b4ba-atzn-wkay
28
vulnerability VCID-e793-c5wh-yuaf
29
vulnerability VCID-fcm6-y2yu-2uca
30
vulnerability VCID-hdnj-vcx7-e7cw
31
vulnerability VCID-hjs3-9b5k-e7c4
32
vulnerability VCID-hsfu-wneb-1kb3
33
vulnerability VCID-j76y-vhb3-4kc8
34
vulnerability VCID-kq1j-jfjz-7yb2
35
vulnerability VCID-mmg6-qgw8-uffr
36
vulnerability VCID-mwcv-7yze-jyfe
37
vulnerability VCID-nsv2-svcf-83f1
38
vulnerability VCID-nyrx-zsbe-23g8
39
vulnerability VCID-p5rs-jqqj-dudg
40
vulnerability VCID-puqv-p29k-6bhv
41
vulnerability VCID-pvq6-vk11-6qdp
42
vulnerability VCID-pvqw-sqms-aqg6
43
vulnerability VCID-pxg6-wvup-gkhb
44
vulnerability VCID-r243-r7yh-93d1
45
vulnerability VCID-rq96-5ke4-kqcd
46
vulnerability VCID-rxn9-7h5z-pyfm
47
vulnerability VCID-sycr-3zm4-n7hm
48
vulnerability VCID-tcfq-uejs-nqbz
49
vulnerability VCID-tpw6-n6zr-tkcc
50
vulnerability VCID-u1gy-kwn1-3fgv
51
vulnerability VCID-u34s-hhf3-uyfy
52
vulnerability VCID-uct4-qg7n-fuh1
53
vulnerability VCID-usku-z4hw-23dn
54
vulnerability VCID-xrdb-kuj9-yffv
55
vulnerability VCID-xxfx-xxax-g3g2
56
vulnerability VCID-ygzv-hrfh-47gr
57
vulnerability VCID-ypv8-jnky-vkc4
58
vulnerability VCID-zgrb-9ta2-pqgu
59
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.5
aliases CVE-2022-1339, GHSA-mj2c-5mjv-gmmj
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-k9su-rd5b-ubg9
55
url VCID-kq1j-jfjz-7yb2
vulnerability_id VCID-kq1j-jfjz-7yb2
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2339
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00524
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2339
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-6fvf-x8c6-2f6j
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-6fvf-x8c6-2f6j
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2339
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2339
3
reference_url https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480
reference_id 6946f8a5a0a93b516c49f17a5b45044eebd73480
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T21:26:57Z/
url https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480
4
reference_url https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2
reference_id bb1537a5-fe7b-4c77-a582-10a82435fbc2
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-30T21:26:57Z/
url https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2
5
reference_url https://github.com/advisories/GHSA-6fvf-x8c6-2f6j
reference_id GHSA-6fvf-x8c6-2f6j
reference_type
scores
url https://github.com/advisories/GHSA-6fvf-x8c6-2f6j
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2339, GHSA-6fvf-x8c6-2f6j
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-kq1j-jfjz-7yb2
56
url VCID-mhbd-nf8m-vfgf
vulnerability_id VCID-mhbd-nf8m-vfgf
summary pimcore is vulnerable to Cross-site Scripting
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0257
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05794
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0257
1
reference_url https://github.com/pimcore/pimcore/commit/dfaf78b26fb77990267c0cc05b9fcb9f8de7b66d
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/dfaf78b26fb77990267c0cc05b9fcb9f8de7b66d
2
reference_url https://huntr.dev/bounties/bad2073c-bbd5-4425-b3e9-c336b73ddda6
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/bad2073c-bbd5-4425-b3e9-c336b73ddda6
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0257
reference_id CVE-2022-0257
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0257
4
reference_url https://github.com/advisories/GHSA-v567-q267-phpg
reference_id GHSA-v567-q267-phpg
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-v567-q267-phpg
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.8
purl pkg:composer/pimcore/pimcore@10.2.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-hzjc-d8zw-5bbf
43
vulnerability VCID-j76y-vhb3-4kc8
44
vulnerability VCID-k9su-rd5b-ubg9
45
vulnerability VCID-kq1j-jfjz-7yb2
46
vulnerability VCID-mmg6-qgw8-uffr
47
vulnerability VCID-mwcv-7yze-jyfe
48
vulnerability VCID-nsv2-svcf-83f1
49
vulnerability VCID-nyrx-zsbe-23g8
50
vulnerability VCID-p5rs-jqqj-dudg
51
vulnerability VCID-puqv-p29k-6bhv
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.8
1
url pkg:composer/pimcore/pimcore@10.2.9
purl pkg:composer/pimcore/pimcore@10.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvba-dkzz-xfc4
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.9
aliases CVE-2022-0257, GHSA-v567-q267-phpg
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mhbd-nf8m-vfgf
57
url VCID-mmg6-qgw8-uffr
vulnerability_id VCID-mmg6-qgw8-uffr
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2327
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2327
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-x9xj-pqmv-8jf7
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-x9xj-pqmv-8jf7
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2327
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2327
3
reference_url https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6
reference_id 7336b71f-a36f-4ce7-a26d-c8335ac713d6
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:19Z/
url https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6
4
reference_url https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f
reference_id fb3056a21d439135480ee299bf1ab646867b5f4f
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:19Z/
url https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f
5
reference_url https://github.com/advisories/GHSA-x9xj-pqmv-8jf7
reference_id GHSA-x9xj-pqmv-8jf7
reference_type
scores
url https://github.com/advisories/GHSA-x9xj-pqmv-8jf7
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2327, GHSA-x9xj-pqmv-8jf7
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mmg6-qgw8-uffr
58
url VCID-mwcv-7yze-jyfe
vulnerability_id VCID-mwcv-7yze-jyfe
summary 
Pimcore is an Open Source Data & Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS & Digital Commerce.
The upload functionality for updating user profile does not properly validate the file content-type, allowing any authenticated user to bypass this security check by adding a valid signature (p.e. GIF89) and sending any invalid content-type. This could allow an authenticated attacker to upload HTML files with JS content that will be executed in the context of the domain. This issue has been patched in version 10.5.16.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-23937
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01744
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-23937
1
reference_url https://github.com/pimcore/pimcore/pull/14125
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14125
2
reference_url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38
3
reference_url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38/
reference_id
reference_type
scores
url https://huntr.dev/bounties/aa7ee076-d729-4fcc-9bcc-48bcbb8eac38/
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-23937
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-23937
5
reference_url https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f
reference_id 75a448ef8ac74424cf4e723afeb6d05f9eed872f
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T20:59:14Z/
url https://github.com/pimcore/pimcore/commit/75a448ef8ac74424cf4e723afeb6d05f9eed872f
6
reference_url https://github.com/advisories/GHSA-8xv4-jj4h-qww6
reference_id GHSA-8xv4-jj4h-qww6
reference_type
scores
url https://github.com/advisories/GHSA-8xv4-jj4h-qww6
7
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6
reference_id GHSA-8xv4-jj4h-qww6
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
1
value 8.2
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-03-10T20:59:14Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-8xv4-jj4h-qww6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.16
purl pkg:composer/pimcore/pimcore@10.5.16
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-79ph-2nu8-4bhf
15
vulnerability VCID-7rvk-x76k-rkex
16
vulnerability VCID-843n-ga86-syg7
17
vulnerability VCID-8d6u-y4zg-7bbq
18
vulnerability VCID-8jqk-yf3u-a3gn
19
vulnerability VCID-9d5s-3c9u-c7gg
20
vulnerability VCID-a9r6-chrk-9ffe
21
vulnerability VCID-afta-wcuy-4kah
22
vulnerability VCID-b4ba-atzn-wkay
23
vulnerability VCID-e793-c5wh-yuaf
24
vulnerability VCID-fcm6-y2yu-2uca
25
vulnerability VCID-hjs3-9b5k-e7c4
26
vulnerability VCID-hsfu-wneb-1kb3
27
vulnerability VCID-j76y-vhb3-4kc8
28
vulnerability VCID-kq1j-jfjz-7yb2
29
vulnerability VCID-mmg6-qgw8-uffr
30
vulnerability VCID-nsv2-svcf-83f1
31
vulnerability VCID-nyrx-zsbe-23g8
32
vulnerability VCID-p5rs-jqqj-dudg
33
vulnerability VCID-puqv-p29k-6bhv
34
vulnerability VCID-pvq6-vk11-6qdp
35
vulnerability VCID-pvqw-sqms-aqg6
36
vulnerability VCID-pxg6-wvup-gkhb
37
vulnerability VCID-r243-r7yh-93d1
38
vulnerability VCID-rq96-5ke4-kqcd
39
vulnerability VCID-rxn9-7h5z-pyfm
40
vulnerability VCID-sycr-3zm4-n7hm
41
vulnerability VCID-tcfq-uejs-nqbz
42
vulnerability VCID-tpw6-n6zr-tkcc
43
vulnerability VCID-u34s-hhf3-uyfy
44
vulnerability VCID-uct4-qg7n-fuh1
45
vulnerability VCID-usku-z4hw-23dn
46
vulnerability VCID-xrdb-kuj9-yffv
47
vulnerability VCID-xxfx-xxax-g3g2
48
vulnerability VCID-ygzv-hrfh-47gr
49
vulnerability VCID-ypv8-jnky-vkc4
50
vulnerability VCID-zgrb-9ta2-pqgu
51
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.16
aliases CVE-2023-23937, GHSA-8xv4-jj4h-qww6, GMS-2023-222
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-mwcv-7yze-jyfe
59
url VCID-nsv2-svcf-83f1
vulnerability_id VCID-nsv2-svcf-83f1
summary Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2984
reference_id
reference_type
scores
0
value 0.0003
scoring_system epss
scoring_elements 0.09252
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2984
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-46g3-f9r8-xj4v
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-46g3-f9r8-xj4v
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2984
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2984
3
reference_url https://huntr.dev/bounties/5df8b951-e2f1-4548-a7e3-601186e1b191
reference_id 5df8b951-e2f1-4548-a7e3-601186e1b191
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-13T19:58:45Z/
url https://huntr.dev/bounties/5df8b951-e2f1-4548-a7e3-601186e1b191
4
reference_url https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed
reference_id e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 6.3
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-13T19:58:45Z/
url https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.22
purl pkg:composer/pimcore/pimcore@10.5.22
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-p5rs-jqqj-dudg
7
vulnerability VCID-rq96-5ke4-kqcd
8
vulnerability VCID-usku-z4hw-23dn
9
vulnerability VCID-xrdb-kuj9-yffv
10
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.22
aliases CVE-2023-2984, GHSA-46g3-f9r8-xj4v
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nsv2-svcf-83f1
60
url VCID-nyrx-zsbe-23g8
vulnerability_id VCID-nyrx-zsbe-23g8
summary Pimcore is an open source data and experience management platform. Versions prior to 10.5.19 have an unsecured tooltip field in DataObject class definition. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Users should upgrade to version 10.5.19 or, as a workaround, apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-28429
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01618
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-28429
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-28429
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-28429
2
reference_url https://github.com/pimcore/pimcore/pull/14574
reference_id 14574
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:32Z/
url https://github.com/pimcore/pimcore/pull/14574
3
reference_url https://github.com/pimcore/pimcore/pull/14574.patch
reference_id 14574.patch
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:32Z/
url https://github.com/pimcore/pimcore/pull/14574.patch
4
reference_url https://github.com/advisories/GHSA-rcg9-hrhx-6q69
reference_id GHSA-rcg9-hrhx-6q69
reference_type
scores
url https://github.com/advisories/GHSA-rcg9-hrhx-6q69
5
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-rcg9-hrhx-6q69
reference_id GHSA-rcg9-hrhx-6q69
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-25T14:28:32Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-rcg9-hrhx-6q69
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases CVE-2023-28429, GHSA-rcg9-hrhx-6q69
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-nyrx-zsbe-23g8
61
url VCID-p5rs-jqqj-dudg
vulnerability_id VCID-p5rs-jqqj-dudg
summary Pimcore is an open source data and experience management platform. Prior to version 11.5.4, authenticated users can craft a filter string used to cause a SQL injection. Version 11.5.4 fixes the issue.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-27617
reference_id
reference_type
scores
0
value 0.00544
scoring_system epss
scoring_elements 0.68197
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-27617
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-27617
reference_id
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-27617
2
reference_url https://github.com/pimcore/pimcore/commit/19a8520895484e68fd254773e32476565d91deea
reference_id 19a8520895484e68fd254773e32476565d91deea
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/commit/19a8520895484e68fd254773e32476565d91deea
3
reference_url https://github.com/advisories/GHSA-qjpx-5m2p-5pgh
reference_id GHSA-qjpx-5m2p-5pgh
reference_type
scores
url https://github.com/advisories/GHSA-qjpx-5m2p-5pgh
4
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-qjpx-5m2p-5pgh
reference_id GHSA-qjpx-5m2p-5pgh
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-qjpx-5m2p-5pgh
5
reference_url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347
reference_id Multiselect.php#L332-L347
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Multiselect.php#L332-L347
6
reference_url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47
reference_id RelationFilterConditionParser.php#L29-L47
reference_type
scores
0
value 6.3
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-12T15:29:36Z/
url https://github.com/pimcore/pimcore/blob/c721a42c23efffd4ca916511ddb969598d302396/models/DataObject/ClassDefinition/Data/Extension/RelationFilterConditionParser.php#L29-L47
fixed_packages
0
url pkg:composer/pimcore/pimcore@11.5.4
purl pkg:composer/pimcore/pimcore@11.5.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.5.4
aliases CVE-2025-27617, GHSA-qjpx-5m2p-5pgh
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-p5rs-jqqj-dudg
62
url VCID-pe3m-swu2-wybk
vulnerability_id VCID-pe3m-swu2-wybk
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-39166
reference_id
reference_type
scores
0
value 0.00019
scoring_system epss
scoring_elements 0.05392
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-39166
1
reference_url https://github.com/pimcore/pimcore/pull/10170
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/10170
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-w6j8-jc36-x5q9
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-w6j8-jc36-x5q9
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-39166
reference_id
reference_type
scores
0
value 8.0
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-39166
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.1.2
purl pkg:composer/pimcore/pimcore@10.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-cr87-arup-w3gs
38
vulnerability VCID-d73k-kkeb-n3b5
39
vulnerability VCID-d8pe-27pm-xbfy
40
vulnerability VCID-e793-c5wh-yuaf
41
vulnerability VCID-eqbu-bpgy-1yd3
42
vulnerability VCID-f189-dkah-2ke1
43
vulnerability VCID-fcm6-y2yu-2uca
44
vulnerability VCID-gf98-8eeb-afc5
45
vulnerability VCID-ha9j-gnw7-rucq
46
vulnerability VCID-hdnj-vcx7-e7cw
47
vulnerability VCID-hjs3-9b5k-e7c4
48
vulnerability VCID-hsfu-wneb-1kb3
49
vulnerability VCID-hzjc-d8zw-5bbf
50
vulnerability VCID-j76y-vhb3-4kc8
51
vulnerability VCID-k9su-rd5b-ubg9
52
vulnerability VCID-kq1j-jfjz-7yb2
53
vulnerability VCID-mhbd-nf8m-vfgf
54
vulnerability VCID-mmg6-qgw8-uffr
55
vulnerability VCID-mwcv-7yze-jyfe
56
vulnerability VCID-nsv2-svcf-83f1
57
vulnerability VCID-nyrx-zsbe-23g8
58
vulnerability VCID-p5rs-jqqj-dudg
59
vulnerability VCID-puqv-p29k-6bhv
60
vulnerability VCID-pvba-dkzz-xfc4
61
vulnerability VCID-pvq6-vk11-6qdp
62
vulnerability VCID-pvqw-sqms-aqg6
63
vulnerability VCID-pxg6-wvup-gkhb
64
vulnerability VCID-r243-r7yh-93d1
65
vulnerability VCID-rq96-5ke4-kqcd
66
vulnerability VCID-rxn9-7h5z-pyfm
67
vulnerability VCID-sft8-4vjf-4ygm
68
vulnerability VCID-svwv-hc14-bfhj
69
vulnerability VCID-sw1n-sk71-y7bs
70
vulnerability VCID-sycr-3zm4-n7hm
71
vulnerability VCID-tcfq-uejs-nqbz
72
vulnerability VCID-tpw6-n6zr-tkcc
73
vulnerability VCID-u1gy-kwn1-3fgv
74
vulnerability VCID-u34s-hhf3-uyfy
75
vulnerability VCID-uct4-qg7n-fuh1
76
vulnerability VCID-ukcy-nczn-rfhz
77
vulnerability VCID-usku-z4hw-23dn
78
vulnerability VCID-vwzr-xk59-3ue5
79
vulnerability VCID-wbbu-rkkp-ebbj
80
vulnerability VCID-xrdb-kuj9-yffv
81
vulnerability VCID-xxfx-xxax-g3g2
82
vulnerability VCID-y9m4-cwvv-mbhe
83
vulnerability VCID-ygzv-hrfh-47gr
84
vulnerability VCID-ypv8-jnky-vkc4
85
vulnerability VCID-zbvh-bt4c-e3em
86
vulnerability VCID-zgrb-9ta2-pqgu
87
vulnerability VCID-zxa3-m253-gug3
88
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.1.2
aliases CVE-2021-39166, GHSA-w6j8-jc36-x5q9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pe3m-swu2-wybk
63
url VCID-puqv-p29k-6bhv
vulnerability_id VCID-puqv-p29k-6bhv
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1286
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01422
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1286
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1286
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1286
2
reference_url https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c
reference_id 31d97442-3f87-439f-83f0-1c7862ef0c7c
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T16:33:06Z/
url https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c
3
reference_url https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce2610481098ca52c18
reference_id 82cca7f4a7560b160336cce2610481098ca52c18
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T16:33:06Z/
url https://github.com/pimcore/pimcore/commit/82cca7f4a7560b160336cce2610481098ca52c18
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1286, GHSA-8jv7-vwrc-mv4g
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-puqv-p29k-6bhv
64
url VCID-pvba-dkzz-xfc4
vulnerability_id VCID-pvba-dkzz-xfc4
summary Cross-site Scripting in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0348
reference_id
reference_type
scores
0
value 0.00027
scoring_system epss
scoring_elements 0.0827
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0348
1
reference_url https://github.com/pimcore/pimcore/commit/832c34aeb9f21f213295a0c28377132df996352a
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/832c34aeb9f21f213295a0c28377132df996352a
2
reference_url https://huntr.dev/bounties/250e79be-7e5d-4ba3-9c34-655e39ade2f4
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/250e79be-7e5d-4ba3-9c34-655e39ade2f4
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0348
reference_id CVE-2022-0348
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0348
4
reference_url https://github.com/advisories/GHSA-8x44-pwr2-rgc6
reference_id GHSA-8x44-pwr2-rgc6
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8x44-pwr2-rgc6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.0
purl pkg:composer/pimcore/pimcore@10.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-cr87-arup-w3gs
38
vulnerability VCID-d73k-kkeb-n3b5
39
vulnerability VCID-d8pe-27pm-xbfy
40
vulnerability VCID-e793-c5wh-yuaf
41
vulnerability VCID-eqbu-bpgy-1yd3
42
vulnerability VCID-f189-dkah-2ke1
43
vulnerability VCID-fcm6-y2yu-2uca
44
vulnerability VCID-gf98-8eeb-afc5
45
vulnerability VCID-ha9j-gnw7-rucq
46
vulnerability VCID-hdnj-vcx7-e7cw
47
vulnerability VCID-hjs3-9b5k-e7c4
48
vulnerability VCID-hsfu-wneb-1kb3
49
vulnerability VCID-hzjc-d8zw-5bbf
50
vulnerability VCID-j76y-vhb3-4kc8
51
vulnerability VCID-k9su-rd5b-ubg9
52
vulnerability VCID-kq1j-jfjz-7yb2
53
vulnerability VCID-mhbd-nf8m-vfgf
54
vulnerability VCID-mmg6-qgw8-uffr
55
vulnerability VCID-mwcv-7yze-jyfe
56
vulnerability VCID-nsv2-svcf-83f1
57
vulnerability VCID-nyrx-zsbe-23g8
58
vulnerability VCID-p5rs-jqqj-dudg
59
vulnerability VCID-puqv-p29k-6bhv
60
vulnerability VCID-pvq6-vk11-6qdp
61
vulnerability VCID-pvqw-sqms-aqg6
62
vulnerability VCID-pxg6-wvup-gkhb
63
vulnerability VCID-r243-r7yh-93d1
64
vulnerability VCID-rq96-5ke4-kqcd
65
vulnerability VCID-rxn9-7h5z-pyfm
66
vulnerability VCID-sft8-4vjf-4ygm
67
vulnerability VCID-svwv-hc14-bfhj
68
vulnerability VCID-sw1n-sk71-y7bs
69
vulnerability VCID-sycr-3zm4-n7hm
70
vulnerability VCID-tcfq-uejs-nqbz
71
vulnerability VCID-tpw6-n6zr-tkcc
72
vulnerability VCID-u1gy-kwn1-3fgv
73
vulnerability VCID-u34s-hhf3-uyfy
74
vulnerability VCID-uct4-qg7n-fuh1
75
vulnerability VCID-ukcy-nczn-rfhz
76
vulnerability VCID-usku-z4hw-23dn
77
vulnerability VCID-vwzr-xk59-3ue5
78
vulnerability VCID-xrdb-kuj9-yffv
79
vulnerability VCID-xxfx-xxax-g3g2
80
vulnerability VCID-y9m4-cwvv-mbhe
81
vulnerability VCID-ygzv-hrfh-47gr
82
vulnerability VCID-ypv8-jnky-vkc4
83
vulnerability VCID-zgrb-9ta2-pqgu
84
vulnerability VCID-zxa3-m253-gug3
85
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.0
1
url pkg:composer/pimcore/pimcore@10.2.10
purl pkg:composer/pimcore/pimcore@10.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvq6-vk11-6qdp
52
vulnerability VCID-pvqw-sqms-aqg6
53
vulnerability VCID-pxg6-wvup-gkhb
54
vulnerability VCID-r243-r7yh-93d1
55
vulnerability VCID-rq96-5ke4-kqcd
56
vulnerability VCID-rxn9-7h5z-pyfm
57
vulnerability VCID-svwv-hc14-bfhj
58
vulnerability VCID-sw1n-sk71-y7bs
59
vulnerability VCID-sycr-3zm4-n7hm
60
vulnerability VCID-tcfq-uejs-nqbz
61
vulnerability VCID-tpw6-n6zr-tkcc
62
vulnerability VCID-u1gy-kwn1-3fgv
63
vulnerability VCID-u34s-hhf3-uyfy
64
vulnerability VCID-uct4-qg7n-fuh1
65
vulnerability VCID-ukcy-nczn-rfhz
66
vulnerability VCID-usku-z4hw-23dn
67
vulnerability VCID-vwzr-xk59-3ue5
68
vulnerability VCID-xrdb-kuj9-yffv
69
vulnerability VCID-xxfx-xxax-g3g2
70
vulnerability VCID-ygzv-hrfh-47gr
71
vulnerability VCID-ypv8-jnky-vkc4
72
vulnerability VCID-zgrb-9ta2-pqgu
73
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.10
aliases CVE-2022-0348, GHSA-8x44-pwr2-rgc6
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pvba-dkzz-xfc4
65
url VCID-pvq6-vk11-6qdp
vulnerability_id VCID-pvq6-vk11-6qdp
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2338
reference_id
reference_type
scores
0
value 0.00063
scoring_system epss
scoring_elements 0.19752
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2338
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-4x35-vr82-xvj6
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-4x35-vr82-xvj6
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2338
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2338
3
reference_url https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520
reference_id 21e35af721c375ef4676ed50835e30d828e76520
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-03T16:28:43Z/
url https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520
4
reference_url https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462
reference_id bbf59fa7-cf5b-4945-81b0-328adc710462
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-02-03T16:28:43Z/
url https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462
5
reference_url https://github.com/advisories/GHSA-4x35-vr82-xvj6
reference_id GHSA-4x35-vr82-xvj6
reference_type
scores
url https://github.com/advisories/GHSA-4x35-vr82-xvj6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2338, GHSA-4x35-vr82-xvj6
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pvq6-vk11-6qdp
66
url VCID-pvqw-sqms-aqg6
vulnerability_id VCID-pvqw-sqms-aqg6
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1115
reference_id
reference_type
scores
0
value 0.00014
scoring_system epss
scoring_elements 0.02778
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1115
1
reference_url https://github.com/pimcore/pimcore/pull/14500.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14500.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-97cp-8873-v2gf
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-97cp-8873-v2gf
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1115
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1115
4
reference_url https://github.com/pimcore/pimcore/commit/c6368b7cc69a3ebf2c83de7586f492ca1f404dd3
reference_id c6368b7cc69a3ebf2c83de7586f492ca1f404dd3
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-11T14:15:26Z/
url https://github.com/pimcore/pimcore/commit/c6368b7cc69a3ebf2c83de7586f492ca1f404dd3
5
reference_url https://huntr.dev/bounties/cfa80332-e4cf-4d64-b3e5-e10298628d17
reference_id cfa80332-e4cf-4d64-b3e5-e10298628d17
reference_type
scores
0
value 7.6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-11T14:15:26Z/
url https://huntr.dev/bounties/cfa80332-e4cf-4d64-b3e5-e10298628d17
6
reference_url https://github.com/advisories/GHSA-97cp-8873-v2gf
reference_id GHSA-97cp-8873-v2gf
reference_type
scores
url https://github.com/advisories/GHSA-97cp-8873-v2gf
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-e793-c5wh-yuaf
22
vulnerability VCID-fcm6-y2yu-2uca
23
vulnerability VCID-hjs3-9b5k-e7c4
24
vulnerability VCID-hsfu-wneb-1kb3
25
vulnerability VCID-j76y-vhb3-4kc8
26
vulnerability VCID-kq1j-jfjz-7yb2
27
vulnerability VCID-mmg6-qgw8-uffr
28
vulnerability VCID-nsv2-svcf-83f1
29
vulnerability VCID-nyrx-zsbe-23g8
30
vulnerability VCID-p5rs-jqqj-dudg
31
vulnerability VCID-puqv-p29k-6bhv
32
vulnerability VCID-pvq6-vk11-6qdp
33
vulnerability VCID-r243-r7yh-93d1
34
vulnerability VCID-rq96-5ke4-kqcd
35
vulnerability VCID-rxn9-7h5z-pyfm
36
vulnerability VCID-sycr-3zm4-n7hm
37
vulnerability VCID-tcfq-uejs-nqbz
38
vulnerability VCID-tpw6-n6zr-tkcc
39
vulnerability VCID-uct4-qg7n-fuh1
40
vulnerability VCID-usku-z4hw-23dn
41
vulnerability VCID-xrdb-kuj9-yffv
42
vulnerability VCID-xxfx-xxax-g3g2
43
vulnerability VCID-ygzv-hrfh-47gr
44
vulnerability VCID-ypv8-jnky-vkc4
45
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1115, GHSA-97cp-8873-v2gf
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pvqw-sqms-aqg6
67
url VCID-pxg6-wvup-gkhb
vulnerability_id VCID-pxg6-wvup-gkhb
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1067
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1067
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1067
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1067
2
reference_url https://huntr.dev/bounties/31d17b34-f80d-49f2-86e7-97ae715cc045
reference_id 31d17b34-f80d-49f2-86e7-97ae715cc045
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T19:54:41Z/
url https://huntr.dev/bounties/31d17b34-f80d-49f2-86e7-97ae715cc045
3
reference_url https://github.com/pimcore/pimcore/commit/4b5733266d7d6aeb4f221a15e005db83fc198edf
reference_id 4b5733266d7d6aeb4f221a15e005db83fc198edf
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-10T19:54:41Z/
url https://github.com/pimcore/pimcore/commit/4b5733266d7d6aeb4f221a15e005db83fc198edf
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-e793-c5wh-yuaf
22
vulnerability VCID-fcm6-y2yu-2uca
23
vulnerability VCID-hjs3-9b5k-e7c4
24
vulnerability VCID-hsfu-wneb-1kb3
25
vulnerability VCID-j76y-vhb3-4kc8
26
vulnerability VCID-kq1j-jfjz-7yb2
27
vulnerability VCID-mmg6-qgw8-uffr
28
vulnerability VCID-nsv2-svcf-83f1
29
vulnerability VCID-nyrx-zsbe-23g8
30
vulnerability VCID-p5rs-jqqj-dudg
31
vulnerability VCID-puqv-p29k-6bhv
32
vulnerability VCID-pvq6-vk11-6qdp
33
vulnerability VCID-r243-r7yh-93d1
34
vulnerability VCID-rq96-5ke4-kqcd
35
vulnerability VCID-rxn9-7h5z-pyfm
36
vulnerability VCID-sycr-3zm4-n7hm
37
vulnerability VCID-tcfq-uejs-nqbz
38
vulnerability VCID-tpw6-n6zr-tkcc
39
vulnerability VCID-uct4-qg7n-fuh1
40
vulnerability VCID-usku-z4hw-23dn
41
vulnerability VCID-xrdb-kuj9-yffv
42
vulnerability VCID-xxfx-xxax-g3g2
43
vulnerability VCID-ygzv-hrfh-47gr
44
vulnerability VCID-ypv8-jnky-vkc4
45
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1067, GHSA-f2jh-mf2c-8278
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-pxg6-wvup-gkhb
68
url VCID-r243-r7yh-93d1
vulnerability_id VCID-r243-r7yh-93d1
summary Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2616
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01352
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2616
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-mhpj-7m7h-8p6x
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-mhpj-7m7h-8p6x
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2616
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2616
3
reference_url https://github.com/pimcore/pimcore/commit/07a2c95be524c7e20105cef58c5767d4ebb06091
reference_id 07a2c95be524c7e20105cef58c5767d4ebb06091
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:40:53Z/
url https://github.com/pimcore/pimcore/commit/07a2c95be524c7e20105cef58c5767d4ebb06091
4
reference_url https://huntr.dev/bounties/564cb512-2bcc-4458-8c20-88110ab45801
reference_id 564cb512-2bcc-4458-8c20-88110ab45801
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-27T19:40:53Z/
url https://huntr.dev/bounties/564cb512-2bcc-4458-8c20-88110ab45801
5
reference_url https://github.com/advisories/GHSA-mhpj-7m7h-8p6x
reference_id GHSA-mhpj-7m7h-8p6x
reference_type
scores
url https://github.com/advisories/GHSA-mhpj-7m7h-8p6x
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2616, GHSA-mhpj-7m7h-8p6x
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r243-r7yh-93d1
69
url VCID-rq96-5ke4-kqcd
vulnerability_id VCID-rq96-5ke4-kqcd
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.24.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3673
reference_id
reference_type
scores
0
value 0.11372
scoring_system epss
scoring_elements 0.9372
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3673
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3673
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3673
2
reference_url https://huntr.dev/bounties/46ca0934-5260-477b-9e86-7b16bb18d0a9
reference_id 46ca0934-5260-477b-9e86-7b16bb18d0a9
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-22T15:08:39Z/
url https://huntr.dev/bounties/46ca0934-5260-477b-9e86-7b16bb18d0a9
3
reference_url https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
reference_id a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-22T15:08:39Z/
url https://github.com/pimcore/pimcore/commit/a06ce0abdba19ae0eefc38b035e677f8f0c2bce9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.24
purl pkg:composer/pimcore/pimcore@10.5.24
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-hjs3-9b5k-e7c4
4
vulnerability VCID-j76y-vhb3-4kc8
5
vulnerability VCID-p5rs-jqqj-dudg
6
vulnerability VCID-usku-z4hw-23dn
7
vulnerability VCID-xrdb-kuj9-yffv
8
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.24
aliases CVE-2023-3673, GHSA-rxp5-qwrf-pfv3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rq96-5ke4-kqcd
70
url VCID-rxn9-7h5z-pyfm
vulnerability_id VCID-rxn9-7h5z-pyfm
summary Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2328
reference_id
reference_type
scores
0
value 0.00017
scoring_system epss
scoring_elements 0.04582
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2328
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-2295-vh28-pphc
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-2295-vh28-pphc
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2328
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2328
3
reference_url https://huntr.dev/bounties/01a44584-e36b-46f4-ad94-53af488397f6
reference_id 01a44584-e36b-46f4-ad94-53af488397f6
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:51:34Z/
url https://huntr.dev/bounties/01a44584-e36b-46f4-ad94-53af488397f6
4
reference_url https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe
reference_id e3562bfe249c557d15474c9a0acd5e06628521fe
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:51:34Z/
url https://github.com/pimcore/pimcore/commit/e3562bfe249c557d15474c9a0acd5e06628521fe
5
reference_url https://github.com/advisories/GHSA-2295-vh28-pphc
reference_id GHSA-2295-vh28-pphc
reference_type
scores
url https://github.com/advisories/GHSA-2295-vh28-pphc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2328, GHSA-2295-vh28-pphc
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-rxn9-7h5z-pyfm
71
url VCID-sft8-4vjf-4ygm
vulnerability_id VCID-sft8-4vjf-4ygm
summary Unrestricted Upload of File with Dangerous Type in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0263
reference_id
reference_type
scores
0
value 4e-05
scoring_system epss
scoring_elements 0.00203
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0263
1
reference_url https://github.com/pimcore/pimcore/commit/35d1853baf64d6a1d90fd8803e52439da53a3911
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/35d1853baf64d6a1d90fd8803e52439da53a3911
2
reference_url https://huntr.dev/bounties/96506857-06bc-4c84-88b7-4f397715bcf6
reference_id
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/96506857-06bc-4c84-88b7-4f397715bcf6
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0263
reference_id CVE-2022-0263
reference_type
scores
0
value 7.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0263
4
reference_url https://github.com/advisories/GHSA-c697-r227-pq6h
reference_id GHSA-c697-r227-pq6h
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-c697-r227-pq6h
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.7
purl pkg:composer/pimcore/pimcore@10.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-fcm6-y2yu-2uca
39
vulnerability VCID-gf98-8eeb-afc5
40
vulnerability VCID-ha9j-gnw7-rucq
41
vulnerability VCID-hdnj-vcx7-e7cw
42
vulnerability VCID-hjs3-9b5k-e7c4
43
vulnerability VCID-hsfu-wneb-1kb3
44
vulnerability VCID-hzjc-d8zw-5bbf
45
vulnerability VCID-j76y-vhb3-4kc8
46
vulnerability VCID-k9su-rd5b-ubg9
47
vulnerability VCID-kq1j-jfjz-7yb2
48
vulnerability VCID-mhbd-nf8m-vfgf
49
vulnerability VCID-mmg6-qgw8-uffr
50
vulnerability VCID-mwcv-7yze-jyfe
51
vulnerability VCID-nsv2-svcf-83f1
52
vulnerability VCID-nyrx-zsbe-23g8
53
vulnerability VCID-p5rs-jqqj-dudg
54
vulnerability VCID-puqv-p29k-6bhv
55
vulnerability VCID-pvq6-vk11-6qdp
56
vulnerability VCID-pvqw-sqms-aqg6
57
vulnerability VCID-pxg6-wvup-gkhb
58
vulnerability VCID-r243-r7yh-93d1
59
vulnerability VCID-rq96-5ke4-kqcd
60
vulnerability VCID-rxn9-7h5z-pyfm
61
vulnerability VCID-svwv-hc14-bfhj
62
vulnerability VCID-sw1n-sk71-y7bs
63
vulnerability VCID-sycr-3zm4-n7hm
64
vulnerability VCID-tcfq-uejs-nqbz
65
vulnerability VCID-tpw6-n6zr-tkcc
66
vulnerability VCID-u1gy-kwn1-3fgv
67
vulnerability VCID-u34s-hhf3-uyfy
68
vulnerability VCID-uct4-qg7n-fuh1
69
vulnerability VCID-ukcy-nczn-rfhz
70
vulnerability VCID-usku-z4hw-23dn
71
vulnerability VCID-vwzr-xk59-3ue5
72
vulnerability VCID-xrdb-kuj9-yffv
73
vulnerability VCID-xxfx-xxax-g3g2
74
vulnerability VCID-ygzv-hrfh-47gr
75
vulnerability VCID-ypv8-jnky-vkc4
76
vulnerability VCID-zgrb-9ta2-pqgu
77
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.7
aliases CVE-2022-0263, GHSA-c697-r227-pq6h
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sft8-4vjf-4ygm
72
url VCID-sk99-1trk-syb4
vulnerability_id VCID-sk99-1trk-syb4
summary 
CKEditor 4 vulnerabilities in versions <4.16.1
Details see: 

https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-m94c-37g6-cjhc ( CVE-2021-37695 )
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-6226-h7ff-ch6c ( CVE-2021-32808 )
https://github.com/ckeditor/ckeditor4/security/advisories/GHSA-7889-rm5j-hpgg  ( CVE-2021-32809 )

Patch: 
https://github.com/pimcore/pimcore/pull/10032
references
0
reference_url https://github.com/pimcore/pimcore/commit/0d2ce3b1db4ac40646cee5104115767505760b6a
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/0d2ce3b1db4ac40646cee5104115767505760b6a
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-cfcv-q4qq-2ph4
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-cfcv-q4qq-2ph4
2
reference_url https://github.com/advisories/GHSA-cfcv-q4qq-2ph4
reference_id GHSA-cfcv-q4qq-2ph4
reference_type
scores
url https://github.com/advisories/GHSA-cfcv-q4qq-2ph4
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.1.1
purl pkg:composer/pimcore/pimcore@10.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-cr87-arup-w3gs
38
vulnerability VCID-d73k-kkeb-n3b5
39
vulnerability VCID-d8pe-27pm-xbfy
40
vulnerability VCID-e793-c5wh-yuaf
41
vulnerability VCID-eqbu-bpgy-1yd3
42
vulnerability VCID-f189-dkah-2ke1
43
vulnerability VCID-fcm6-y2yu-2uca
44
vulnerability VCID-gf98-8eeb-afc5
45
vulnerability VCID-ha9j-gnw7-rucq
46
vulnerability VCID-hdnj-vcx7-e7cw
47
vulnerability VCID-hjs3-9b5k-e7c4
48
vulnerability VCID-hmq1-yjsd-5fah
49
vulnerability VCID-hsfu-wneb-1kb3
50
vulnerability VCID-hzjc-d8zw-5bbf
51
vulnerability VCID-j76y-vhb3-4kc8
52
vulnerability VCID-k9su-rd5b-ubg9
53
vulnerability VCID-kq1j-jfjz-7yb2
54
vulnerability VCID-mhbd-nf8m-vfgf
55
vulnerability VCID-mmg6-qgw8-uffr
56
vulnerability VCID-mwcv-7yze-jyfe
57
vulnerability VCID-nsv2-svcf-83f1
58
vulnerability VCID-nyrx-zsbe-23g8
59
vulnerability VCID-p5rs-jqqj-dudg
60
vulnerability VCID-pe3m-swu2-wybk
61
vulnerability VCID-puqv-p29k-6bhv
62
vulnerability VCID-pvba-dkzz-xfc4
63
vulnerability VCID-pvq6-vk11-6qdp
64
vulnerability VCID-pvqw-sqms-aqg6
65
vulnerability VCID-pxg6-wvup-gkhb
66
vulnerability VCID-r243-r7yh-93d1
67
vulnerability VCID-rq96-5ke4-kqcd
68
vulnerability VCID-rxn9-7h5z-pyfm
69
vulnerability VCID-sft8-4vjf-4ygm
70
vulnerability VCID-svwv-hc14-bfhj
71
vulnerability VCID-sw1n-sk71-y7bs
72
vulnerability VCID-sycr-3zm4-n7hm
73
vulnerability VCID-tcfq-uejs-nqbz
74
vulnerability VCID-tpw6-n6zr-tkcc
75
vulnerability VCID-u1gy-kwn1-3fgv
76
vulnerability VCID-u34s-hhf3-uyfy
77
vulnerability VCID-uct4-qg7n-fuh1
78
vulnerability VCID-ukcy-nczn-rfhz
79
vulnerability VCID-usku-z4hw-23dn
80
vulnerability VCID-vwzr-xk59-3ue5
81
vulnerability VCID-wbbu-rkkp-ebbj
82
vulnerability VCID-xrdb-kuj9-yffv
83
vulnerability VCID-xxfx-xxax-g3g2
84
vulnerability VCID-y9m4-cwvv-mbhe
85
vulnerability VCID-ygzv-hrfh-47gr
86
vulnerability VCID-ypv8-jnky-vkc4
87
vulnerability VCID-zbvh-bt4c-e3em
88
vulnerability VCID-zgrb-9ta2-pqgu
89
vulnerability VCID-zxa3-m253-gug3
90
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.1.1
aliases GHSA-cfcv-q4qq-2ph4, GMS-2021-117
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sk99-1trk-syb4
73
url VCID-svwv-hc14-bfhj
vulnerability_id VCID-svwv-hc14-bfhj
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2730
reference_id
reference_type
scores
0
value 0.00011
scoring_system epss
scoring_elements 0.01578
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2730
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2730
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2730
2
reference_url https://huntr.dev/bounties/6c6f5c26-d545-4e7b-82bb-1fe28006c885
reference_id 6c6f5c26-d545-4e7b-82bb-1fe28006c885
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-22T21:17:55Z/
url https://huntr.dev/bounties/6c6f5c26-d545-4e7b-82bb-1fe28006c885
3
reference_url https://github.com/pimcore/pimcore/commit/8ab06bfbb5a05a1b190731d9c7476ec45f5ee878
reference_id 8ab06bfbb5a05a1b190731d9c7476ec45f5ee878
reference_type
scores
0
value 6.3
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-22T21:17:55Z/
url https://github.com/pimcore/pimcore/commit/8ab06bfbb5a05a1b190731d9c7476ec45f5ee878
4
reference_url https://github.com/advisories/GHSA-q3p4-v2cm-q945
reference_id GHSA-q3p4-v2cm-q945
reference_type
scores
url https://github.com/advisories/GHSA-q3p4-v2cm-q945
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.3
purl pkg:composer/pimcore/pimcore@10.3.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-b4ba-atzn-wkay
29
vulnerability VCID-bed6-u2ht-dqgs
30
vulnerability VCID-e793-c5wh-yuaf
31
vulnerability VCID-fcm6-y2yu-2uca
32
vulnerability VCID-hdnj-vcx7-e7cw
33
vulnerability VCID-hjs3-9b5k-e7c4
34
vulnerability VCID-hsfu-wneb-1kb3
35
vulnerability VCID-j76y-vhb3-4kc8
36
vulnerability VCID-k9su-rd5b-ubg9
37
vulnerability VCID-kq1j-jfjz-7yb2
38
vulnerability VCID-mmg6-qgw8-uffr
39
vulnerability VCID-mwcv-7yze-jyfe
40
vulnerability VCID-nsv2-svcf-83f1
41
vulnerability VCID-nyrx-zsbe-23g8
42
vulnerability VCID-p5rs-jqqj-dudg
43
vulnerability VCID-puqv-p29k-6bhv
44
vulnerability VCID-pvq6-vk11-6qdp
45
vulnerability VCID-pvqw-sqms-aqg6
46
vulnerability VCID-pxg6-wvup-gkhb
47
vulnerability VCID-r243-r7yh-93d1
48
vulnerability VCID-rq96-5ke4-kqcd
49
vulnerability VCID-rxn9-7h5z-pyfm
50
vulnerability VCID-sw1n-sk71-y7bs
51
vulnerability VCID-sycr-3zm4-n7hm
52
vulnerability VCID-tcfq-uejs-nqbz
53
vulnerability VCID-tpw6-n6zr-tkcc
54
vulnerability VCID-u1gy-kwn1-3fgv
55
vulnerability VCID-u34s-hhf3-uyfy
56
vulnerability VCID-uct4-qg7n-fuh1
57
vulnerability VCID-usku-z4hw-23dn
58
vulnerability VCID-vwzr-xk59-3ue5
59
vulnerability VCID-xrdb-kuj9-yffv
60
vulnerability VCID-xxfx-xxax-g3g2
61
vulnerability VCID-ygzv-hrfh-47gr
62
vulnerability VCID-ypv8-jnky-vkc4
63
vulnerability VCID-zgrb-9ta2-pqgu
64
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.3
aliases CVE-2023-2730, GHSA-q3p4-v2cm-q945
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-svwv-hc14-bfhj
74
url VCID-sw1n-sk71-y7bs
vulnerability_id VCID-sw1n-sk71-y7bs
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0705
reference_id
reference_type
scores
0
value 0.0001
scoring_system epss
scoring_elements 0.0115
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0705
1
reference_url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
2
reference_url https://github.com/pimcore/pimcore/pull/11447
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/11447
3
reference_url https://huntr.dev/bounties/0e1b6836-e5b5-4e47-b9ab-2f6a4790ee7b
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/0e1b6836-e5b5-4e47-b9ab-2f6a4790ee7b
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0705
reference_id CVE-2022-0705
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0705
5
reference_url https://github.com/advisories/GHSA-xmq3-hgjx-6997
reference_id GHSA-xmq3-hgjx-6997
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-xmq3-hgjx-6997
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
1
url pkg:composer/pimcore/pimcore@10.4.0
purl pkg:composer/pimcore/pimcore@10.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u1gy-kwn1-3fgv
49
vulnerability VCID-u34s-hhf3-uyfy
50
vulnerability VCID-uct4-qg7n-fuh1
51
vulnerability VCID-usku-z4hw-23dn
52
vulnerability VCID-xrdb-kuj9-yffv
53
vulnerability VCID-xxfx-xxax-g3g2
54
vulnerability VCID-ygzv-hrfh-47gr
55
vulnerability VCID-ypv8-jnky-vkc4
56
vulnerability VCID-zgrb-9ta2-pqgu
57
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.4.0
aliases CVE-2022-0705, GHSA-xmq3-hgjx-6997
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sw1n-sk71-y7bs
75
url VCID-sycr-3zm4-n7hm
vulnerability_id VCID-sycr-3zm4-n7hm
summary 
Cross-site Scripting (XSS) - stored in Print Documents
### Impact
Stored xss leads to steal cookies and other information of other users

### Patches
Update to version 10.5.19 or apply this patch manually https://github.com/pimcore/pimcore/pull/14560.patch

### Workarounds
Apply https://github.com/pimcore/pimcore/pull/14560.patch manually.

### References
https://huntr.dev/bounties/31d97442-3f87-439f-83f0-1c7862ef0c7c/
references
0
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-rrwm-8wqm-gwgv
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-rrwm-8wqm-gwgv
1
reference_url https://github.com/advisories/GHSA-rrwm-8wqm-gwgv
reference_id GHSA-rrwm-8wqm-gwgv
reference_type
scores
url https://github.com/advisories/GHSA-rrwm-8wqm-gwgv
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
aliases GHSA-rrwm-8wqm-gwgv, GMS-2023-781
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-sycr-3zm4-n7hm
76
url VCID-tcfq-uejs-nqbz
vulnerability_id VCID-tcfq-uejs-nqbz
summary A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is present in the From and To fields of the Date Range section, allowing an attacker to inject malicious scripts. This can lead to the execution of arbitrary JavaScript code in the context of the user's browser, potentially stealing cookies or redirecting users to malicious sites. The issue is fixed in version 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2332
reference_id
reference_type
scores
0
value 3e-05
scoring_system epss
scoring_elements 0.001
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2332
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-r7mm-jx6h-hv7m
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-r7mm-jx6h-hv7m
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2332
reference_id
reference_type
scores
0
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2332
3
reference_url https://github.com/pimcore/pimcore/commit/a4491551967d879141a3fdf0986a9dd3d891abfe
reference_id a4491551967d879141a3fdf0986a9dd3d891abfe
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T21:00:05Z/
url https://github.com/pimcore/pimcore/commit/a4491551967d879141a3fdf0986a9dd3d891abfe
4
reference_url https://huntr.com/bounties/e436ed71-6741-4b30-89db-f7f3de4aca2c
reference_id e436ed71-6741-4b30-89db-f7f3de4aca2c
reference_type
scores
0
value 4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
1
value 4.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-11-15T21:00:05Z/
url https://huntr.com/bounties/e436ed71-6741-4b30-89db-f7f3de4aca2c
5
reference_url https://github.com/advisories/GHSA-r7mm-jx6h-hv7m
reference_id GHSA-r7mm-jx6h-hv7m
reference_type
scores
url https://github.com/advisories/GHSA-r7mm-jx6h-hv7m
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2332, GHSA-r7mm-jx6h-hv7m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tcfq-uejs-nqbz
77
url VCID-tpw6-n6zr-tkcc
vulnerability_id VCID-tpw6-n6zr-tkcc
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2340
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00677
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2340
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-g93x-fm2w-5pxw
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-g93x-fm2w-5pxw
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2340
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2340
3
reference_url https://huntr.dev/bounties/964762b0-b4fe-441c-81e1-0ebdbbf80f3b
reference_id 964762b0-b4fe-441c-81e1-0ebdbbf80f3b
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:45Z/
url https://huntr.dev/bounties/964762b0-b4fe-441c-81e1-0ebdbbf80f3b
4
reference_url https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e
reference_id aa38319e353cc3cdfac12e03e21ed7a8f3628d3e
reference_type
scores
0
value 6.1
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:32:45Z/
url https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e
5
reference_url https://github.com/advisories/GHSA-g93x-fm2w-5pxw
reference_id GHSA-g93x-fm2w-5pxw
reference_type
scores
url https://github.com/advisories/GHSA-g93x-fm2w-5pxw
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2340, GHSA-g93x-fm2w-5pxw
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-tpw6-n6zr-tkcc
78
url VCID-u1gy-kwn1-3fgv
vulnerability_id VCID-u1gy-kwn1-3fgv
summary Pimcore Cross-site Scripting (XSS)
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-2796
reference_id
reference_type
scores
0
value 0.00198
scoring_system epss
scoring_elements 0.41851
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-2796
1
reference_url https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d
2
reference_url https://huntr.dev/bounties/69d56ec3-8370-44cf-9732-4065e3076097
reference_id
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/69d56ec3-8370-44cf-9732-4065e3076097
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-2796
reference_id CVE-2022-2796
reference_type
scores
0
value 6.7
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-2796
4
reference_url https://github.com/advisories/GHSA-pr4f-4pcx-2r3h
reference_id GHSA-pr4f-4pcx-2r3h
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-pr4f-4pcx-2r3h
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.4
purl pkg:composer/pimcore/pimcore@10.5.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-1ghg-916g-5ycf
2
vulnerability VCID-2dhw-5ft3-4udh
3
vulnerability VCID-2n5e-7xn6-4ubt
4
vulnerability VCID-35c5-mzwz-8bgw
5
vulnerability VCID-3b57-hrf9-z3e2
6
vulnerability VCID-3hs9-ywbk-rbdy
7
vulnerability VCID-3q4h-tcnp-7qa1
8
vulnerability VCID-4ar7-yac3-fkf7
9
vulnerability VCID-4jxn-m7de-5yay
10
vulnerability VCID-4n7p-vgv2-2qc3
11
vulnerability VCID-4tqk-ragu-h7ce
12
vulnerability VCID-6286-wv98-9uht
13
vulnerability VCID-6etn-5u58-sqgg
14
vulnerability VCID-6fw4-9qqw-bqen
15
vulnerability VCID-6uw7-89nn-tkg3
16
vulnerability VCID-7191-wmtq-7fdg
17
vulnerability VCID-79ph-2nu8-4bhf
18
vulnerability VCID-7rvk-x76k-rkex
19
vulnerability VCID-843n-ga86-syg7
20
vulnerability VCID-8d6u-y4zg-7bbq
21
vulnerability VCID-8jqk-yf3u-a3gn
22
vulnerability VCID-9d5s-3c9u-c7gg
23
vulnerability VCID-a9r6-chrk-9ffe
24
vulnerability VCID-afta-wcuy-4kah
25
vulnerability VCID-b4ba-atzn-wkay
26
vulnerability VCID-e793-c5wh-yuaf
27
vulnerability VCID-fcm6-y2yu-2uca
28
vulnerability VCID-hdnj-vcx7-e7cw
29
vulnerability VCID-hjs3-9b5k-e7c4
30
vulnerability VCID-hsfu-wneb-1kb3
31
vulnerability VCID-j76y-vhb3-4kc8
32
vulnerability VCID-kq1j-jfjz-7yb2
33
vulnerability VCID-mmg6-qgw8-uffr
34
vulnerability VCID-mwcv-7yze-jyfe
35
vulnerability VCID-nsv2-svcf-83f1
36
vulnerability VCID-nyrx-zsbe-23g8
37
vulnerability VCID-p5rs-jqqj-dudg
38
vulnerability VCID-puqv-p29k-6bhv
39
vulnerability VCID-pvq6-vk11-6qdp
40
vulnerability VCID-pvqw-sqms-aqg6
41
vulnerability VCID-pxg6-wvup-gkhb
42
vulnerability VCID-r243-r7yh-93d1
43
vulnerability VCID-rq96-5ke4-kqcd
44
vulnerability VCID-rxn9-7h5z-pyfm
45
vulnerability VCID-sycr-3zm4-n7hm
46
vulnerability VCID-tcfq-uejs-nqbz
47
vulnerability VCID-tpw6-n6zr-tkcc
48
vulnerability VCID-u34s-hhf3-uyfy
49
vulnerability VCID-uct4-qg7n-fuh1
50
vulnerability VCID-usku-z4hw-23dn
51
vulnerability VCID-xrdb-kuj9-yffv
52
vulnerability VCID-xxfx-xxax-g3g2
53
vulnerability VCID-ygzv-hrfh-47gr
54
vulnerability VCID-ypv8-jnky-vkc4
55
vulnerability VCID-zgrb-9ta2-pqgu
56
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.4
aliases CVE-2022-2796, GHSA-pr4f-4pcx-2r3h
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u1gy-kwn1-3fgv
79
url VCID-u34s-hhf3-uyfy
vulnerability_id VCID-u34s-hhf3-uyfy
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1116
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00677
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1116
1
reference_url https://github.com/pimcore/pimcore/pull/14467.patch
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/14467.patch
2
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-96hp-38wx-j3wc
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-96hp-38wx-j3wc
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1116
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1116
4
reference_url https://huntr.dev/bounties/3245ff99-9adf-4db9-af94-f995747e09d1
reference_id 3245ff99-9adf-4db9-af94-f995747e09d1
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:54Z/
url https://huntr.dev/bounties/3245ff99-9adf-4db9-af94-f995747e09d1
5
reference_url https://github.com/pimcore/pimcore/commit/f6d322efa207a737eedd8726b7c92e957a83341e
reference_id f6d322efa207a737eedd8726b7c92e957a83341e
reference_type
scores
0
value 5.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:54Z/
url https://github.com/pimcore/pimcore/commit/f6d322efa207a737eedd8726b7c92e957a83341e
6
reference_url https://github.com/advisories/GHSA-96hp-38wx-j3wc
reference_id GHSA-96hp-38wx-j3wc
reference_type
scores
url https://github.com/advisories/GHSA-96hp-38wx-j3wc
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-e793-c5wh-yuaf
22
vulnerability VCID-fcm6-y2yu-2uca
23
vulnerability VCID-hjs3-9b5k-e7c4
24
vulnerability VCID-hsfu-wneb-1kb3
25
vulnerability VCID-j76y-vhb3-4kc8
26
vulnerability VCID-kq1j-jfjz-7yb2
27
vulnerability VCID-mmg6-qgw8-uffr
28
vulnerability VCID-nsv2-svcf-83f1
29
vulnerability VCID-nyrx-zsbe-23g8
30
vulnerability VCID-p5rs-jqqj-dudg
31
vulnerability VCID-puqv-p29k-6bhv
32
vulnerability VCID-pvq6-vk11-6qdp
33
vulnerability VCID-r243-r7yh-93d1
34
vulnerability VCID-rq96-5ke4-kqcd
35
vulnerability VCID-rxn9-7h5z-pyfm
36
vulnerability VCID-sycr-3zm4-n7hm
37
vulnerability VCID-tcfq-uejs-nqbz
38
vulnerability VCID-tpw6-n6zr-tkcc
39
vulnerability VCID-uct4-qg7n-fuh1
40
vulnerability VCID-usku-z4hw-23dn
41
vulnerability VCID-xrdb-kuj9-yffv
42
vulnerability VCID-xxfx-xxax-g3g2
43
vulnerability VCID-ygzv-hrfh-47gr
44
vulnerability VCID-ypv8-jnky-vkc4
45
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1116, GHSA-96hp-38wx-j3wc
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-u34s-hhf3-uyfy
80
url VCID-uct4-qg7n-fuh1
vulnerability_id VCID-uct4-qg7n-fuh1
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2322
reference_id
reference_type
scores
0
value 0.00012
scoring_system epss
scoring_elements 0.01666
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2322
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-476g-v7hf-cw5m
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-476g-v7hf-cw5m
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2322
reference_id
reference_type
scores
0
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2322
3
reference_url https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b9524705074a45e7f773
reference_id 9fc674892b8b53103098b9524705074a45e7f773
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:34:58Z/
url https://github.com/pimcore/pimcore/commit/9fc674892b8b53103098b9524705074a45e7f773
4
reference_url https://huntr.dev/bounties/f7228f3f-3bef-46fe-b0e3-56c432048a67
reference_id f7228f3f-3bef-46fe-b0e3-56c432048a67
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
1
value 5.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:34:58Z/
url https://huntr.dev/bounties/f7228f3f-3bef-46fe-b0e3-56c432048a67
5
reference_url https://github.com/advisories/GHSA-476g-v7hf-cw5m
reference_id GHSA-476g-v7hf-cw5m
reference_type
scores
url https://github.com/advisories/GHSA-476g-v7hf-cw5m
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2322, GHSA-476g-v7hf-cw5m
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-uct4-qg7n-fuh1
81
url VCID-ukcy-nczn-rfhz
vulnerability_id VCID-ukcy-nczn-rfhz
summary Cross-site Scripting in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0509
reference_id
reference_type
scores
0
value 0.00054
scoring_system epss
scoring_elements 0.17147
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0509
1
reference_url https://github.com/pimcore/pimcore/commit/6ccb5c12fc1be065ebce9c89c4677ee939b88597
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/6ccb5c12fc1be065ebce9c89c4677ee939b88597
2
reference_url https://huntr.dev/bounties/26cdf86c-8edc-4af6-8411-d569699ecd1b
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/26cdf86c-8edc-4af6-8411-d569699ecd1b
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0509
reference_id CVE-2022-0509
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0509
4
reference_url https://github.com/advisories/GHSA-cg3h-rc9q-g8v9
reference_id GHSA-cg3h-rc9q-g8v9
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-cg3h-rc9q-g8v9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.1
purl pkg:composer/pimcore/pimcore@10.3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-5ds5-2ey4-u7gm
14
vulnerability VCID-6286-wv98-9uht
15
vulnerability VCID-6etn-5u58-sqgg
16
vulnerability VCID-6fw4-9qqw-bqen
17
vulnerability VCID-6uw7-89nn-tkg3
18
vulnerability VCID-7191-wmtq-7fdg
19
vulnerability VCID-79ph-2nu8-4bhf
20
vulnerability VCID-7rvk-x76k-rkex
21
vulnerability VCID-843n-ga86-syg7
22
vulnerability VCID-8caz-76fk-x7er
23
vulnerability VCID-8d6u-y4zg-7bbq
24
vulnerability VCID-8jqk-yf3u-a3gn
25
vulnerability VCID-9d5s-3c9u-c7gg
26
vulnerability VCID-a9r6-chrk-9ffe
27
vulnerability VCID-afta-wcuy-4kah
28
vulnerability VCID-akv1-wzyh-fydj
29
vulnerability VCID-amnn-gf11-7yc2
30
vulnerability VCID-b4ba-atzn-wkay
31
vulnerability VCID-e793-c5wh-yuaf
32
vulnerability VCID-fcm6-y2yu-2uca
33
vulnerability VCID-hdnj-vcx7-e7cw
34
vulnerability VCID-hjs3-9b5k-e7c4
35
vulnerability VCID-hsfu-wneb-1kb3
36
vulnerability VCID-j76y-vhb3-4kc8
37
vulnerability VCID-k9su-rd5b-ubg9
38
vulnerability VCID-kq1j-jfjz-7yb2
39
vulnerability VCID-mmg6-qgw8-uffr
40
vulnerability VCID-mwcv-7yze-jyfe
41
vulnerability VCID-nsv2-svcf-83f1
42
vulnerability VCID-nyrx-zsbe-23g8
43
vulnerability VCID-p5rs-jqqj-dudg
44
vulnerability VCID-puqv-p29k-6bhv
45
vulnerability VCID-pvq6-vk11-6qdp
46
vulnerability VCID-pvqw-sqms-aqg6
47
vulnerability VCID-pxg6-wvup-gkhb
48
vulnerability VCID-r243-r7yh-93d1
49
vulnerability VCID-rq96-5ke4-kqcd
50
vulnerability VCID-rxn9-7h5z-pyfm
51
vulnerability VCID-svwv-hc14-bfhj
52
vulnerability VCID-sycr-3zm4-n7hm
53
vulnerability VCID-tcfq-uejs-nqbz
54
vulnerability VCID-tpw6-n6zr-tkcc
55
vulnerability VCID-u1gy-kwn1-3fgv
56
vulnerability VCID-u34s-hhf3-uyfy
57
vulnerability VCID-uct4-qg7n-fuh1
58
vulnerability VCID-usku-z4hw-23dn
59
vulnerability VCID-vwzr-xk59-3ue5
60
vulnerability VCID-xrdb-kuj9-yffv
61
vulnerability VCID-xxfx-xxax-g3g2
62
vulnerability VCID-ygzv-hrfh-47gr
63
vulnerability VCID-ypv8-jnky-vkc4
64
vulnerability VCID-zgrb-9ta2-pqgu
65
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.1
aliases CVE-2022-0509, GHSA-cg3h-rc9q-g8v9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ukcy-nczn-rfhz
82
url VCID-usku-z4hw-23dn
vulnerability_id VCID-usku-z4hw-23dn
summary SQL Injection in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3820
reference_id
reference_type
scores
0
value 0.41187
scoring_system epss
scoring_elements 0.97485
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3820
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-c9hw-557q-f8hq
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-c9hw-557q-f8hq
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3820
reference_id
reference_type
scores
0
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3820
3
reference_url https://huntr.dev/bounties/b00a38b6-d040-494d-bf46-38f46ac1a1db
reference_id b00a38b6-d040-494d-bf46-38f46ac1a1db
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-16T13:29:49Z/
url https://huntr.dev/bounties/b00a38b6-d040-494d-bf46-38f46ac1a1db
4
reference_url https://github.com/pimcore/pimcore/commit/e641968979d4a2377bbea5e2a76bdede040d0b97
reference_id e641968979d4a2377bbea5e2a76bdede040d0b97
reference_type
scores
0
value 7.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
1
value 7.2
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-16T13:29:49Z/
url https://github.com/pimcore/pimcore/commit/e641968979d4a2377bbea5e2a76bdede040d0b97
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-hjs3-9b5k-e7c4
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3820, GHSA-c9hw-557q-f8hq
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-usku-z4hw-23dn
83
url VCID-vwzr-xk59-3ue5
vulnerability_id VCID-vwzr-xk59-3ue5
summary SQL Injection in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-1219
reference_id
reference_type
scores
0
value 0.00184
scoring_system epss
scoring_elements 0.40031
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-1219
1
reference_url https://github.com/pimcore/pimcore/commit/a697830359df06246acca502ee2455614de68017
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/a697830359df06246acca502ee2455614de68017
2
reference_url https://huntr.dev/bounties/f700bd18-1fd3-4a05-867f-07176aebc7f6
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/f700bd18-1fd3-4a05-867f-07176aebc7f6
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-1219
reference_id CVE-2022-1219
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-1219
4
reference_url https://github.com/advisories/GHSA-6gm7-j668-w6h9
reference_id GHSA-6gm7-j668-w6h9
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-6gm7-j668-w6h9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.3.5
purl pkg:composer/pimcore/pimcore@10.3.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-4ar7-yac3-fkf7
10
vulnerability VCID-4jxn-m7de-5yay
11
vulnerability VCID-4n7p-vgv2-2qc3
12
vulnerability VCID-4tqk-ragu-h7ce
13
vulnerability VCID-6286-wv98-9uht
14
vulnerability VCID-6etn-5u58-sqgg
15
vulnerability VCID-6fw4-9qqw-bqen
16
vulnerability VCID-6uw7-89nn-tkg3
17
vulnerability VCID-7191-wmtq-7fdg
18
vulnerability VCID-79ph-2nu8-4bhf
19
vulnerability VCID-7rvk-x76k-rkex
20
vulnerability VCID-843n-ga86-syg7
21
vulnerability VCID-8caz-76fk-x7er
22
vulnerability VCID-8d6u-y4zg-7bbq
23
vulnerability VCID-8jqk-yf3u-a3gn
24
vulnerability VCID-9d5s-3c9u-c7gg
25
vulnerability VCID-a9r6-chrk-9ffe
26
vulnerability VCID-afta-wcuy-4kah
27
vulnerability VCID-b4ba-atzn-wkay
28
vulnerability VCID-e793-c5wh-yuaf
29
vulnerability VCID-fcm6-y2yu-2uca
30
vulnerability VCID-hdnj-vcx7-e7cw
31
vulnerability VCID-hjs3-9b5k-e7c4
32
vulnerability VCID-hsfu-wneb-1kb3
33
vulnerability VCID-j76y-vhb3-4kc8
34
vulnerability VCID-kq1j-jfjz-7yb2
35
vulnerability VCID-mmg6-qgw8-uffr
36
vulnerability VCID-mwcv-7yze-jyfe
37
vulnerability VCID-nsv2-svcf-83f1
38
vulnerability VCID-nyrx-zsbe-23g8
39
vulnerability VCID-p5rs-jqqj-dudg
40
vulnerability VCID-puqv-p29k-6bhv
41
vulnerability VCID-pvq6-vk11-6qdp
42
vulnerability VCID-pvqw-sqms-aqg6
43
vulnerability VCID-pxg6-wvup-gkhb
44
vulnerability VCID-r243-r7yh-93d1
45
vulnerability VCID-rq96-5ke4-kqcd
46
vulnerability VCID-rxn9-7h5z-pyfm
47
vulnerability VCID-sycr-3zm4-n7hm
48
vulnerability VCID-tcfq-uejs-nqbz
49
vulnerability VCID-tpw6-n6zr-tkcc
50
vulnerability VCID-u1gy-kwn1-3fgv
51
vulnerability VCID-u34s-hhf3-uyfy
52
vulnerability VCID-uct4-qg7n-fuh1
53
vulnerability VCID-usku-z4hw-23dn
54
vulnerability VCID-xrdb-kuj9-yffv
55
vulnerability VCID-xxfx-xxax-g3g2
56
vulnerability VCID-ygzv-hrfh-47gr
57
vulnerability VCID-ypv8-jnky-vkc4
58
vulnerability VCID-zgrb-9ta2-pqgu
59
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.3.5
aliases CVE-2022-1219, GHSA-6gm7-j668-w6h9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-vwzr-xk59-3ue5
84
url VCID-wbbu-rkkp-ebbj
vulnerability_id VCID-wbbu-rkkp-ebbj
summary Cross-site Scripting in Pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0251
reference_id
reference_type
scores
0
value 0.00014
scoring_system epss
scoring_elements 0.02706
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0251
1
reference_url https://github.com/pimcore/pimcore/commit/3ae96b9d41c117aafa45873ad10077d4b873a3cb
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/3ae96b9d41c117aafa45873ad10077d4b873a3cb
2
reference_url https://huntr.dev/bounties/eb4b08f9-cf8b-4335-b3b8-ed44e5fa80a5
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/eb4b08f9-cf8b-4335-b3b8-ed44e5fa80a5
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0251
reference_id CVE-2022-0251
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0251
4
reference_url https://github.com/advisories/GHSA-f7q6-xxph-mfm8
reference_id GHSA-f7q6-xxph-mfm8
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-f7q6-xxph-mfm8
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.0
purl pkg:composer/pimcore/pimcore@10.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-cr87-arup-w3gs
38
vulnerability VCID-d73k-kkeb-n3b5
39
vulnerability VCID-d8pe-27pm-xbfy
40
vulnerability VCID-e793-c5wh-yuaf
41
vulnerability VCID-eqbu-bpgy-1yd3
42
vulnerability VCID-f189-dkah-2ke1
43
vulnerability VCID-fcm6-y2yu-2uca
44
vulnerability VCID-gf98-8eeb-afc5
45
vulnerability VCID-ha9j-gnw7-rucq
46
vulnerability VCID-hdnj-vcx7-e7cw
47
vulnerability VCID-hjs3-9b5k-e7c4
48
vulnerability VCID-hsfu-wneb-1kb3
49
vulnerability VCID-hzjc-d8zw-5bbf
50
vulnerability VCID-j76y-vhb3-4kc8
51
vulnerability VCID-k9su-rd5b-ubg9
52
vulnerability VCID-kq1j-jfjz-7yb2
53
vulnerability VCID-mhbd-nf8m-vfgf
54
vulnerability VCID-mmg6-qgw8-uffr
55
vulnerability VCID-mwcv-7yze-jyfe
56
vulnerability VCID-nsv2-svcf-83f1
57
vulnerability VCID-nyrx-zsbe-23g8
58
vulnerability VCID-p5rs-jqqj-dudg
59
vulnerability VCID-puqv-p29k-6bhv
60
vulnerability VCID-pvq6-vk11-6qdp
61
vulnerability VCID-pvqw-sqms-aqg6
62
vulnerability VCID-pxg6-wvup-gkhb
63
vulnerability VCID-r243-r7yh-93d1
64
vulnerability VCID-rq96-5ke4-kqcd
65
vulnerability VCID-rxn9-7h5z-pyfm
66
vulnerability VCID-sft8-4vjf-4ygm
67
vulnerability VCID-svwv-hc14-bfhj
68
vulnerability VCID-sw1n-sk71-y7bs
69
vulnerability VCID-sycr-3zm4-n7hm
70
vulnerability VCID-tcfq-uejs-nqbz
71
vulnerability VCID-tpw6-n6zr-tkcc
72
vulnerability VCID-u1gy-kwn1-3fgv
73
vulnerability VCID-u34s-hhf3-uyfy
74
vulnerability VCID-uct4-qg7n-fuh1
75
vulnerability VCID-ukcy-nczn-rfhz
76
vulnerability VCID-usku-z4hw-23dn
77
vulnerability VCID-vwzr-xk59-3ue5
78
vulnerability VCID-xrdb-kuj9-yffv
79
vulnerability VCID-xxfx-xxax-g3g2
80
vulnerability VCID-y9m4-cwvv-mbhe
81
vulnerability VCID-ygzv-hrfh-47gr
82
vulnerability VCID-ypv8-jnky-vkc4
83
vulnerability VCID-zgrb-9ta2-pqgu
84
vulnerability VCID-zxa3-m253-gug3
85
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.0
1
url pkg:composer/pimcore/pimcore@10.2.10
purl pkg:composer/pimcore/pimcore@10.2.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvq6-vk11-6qdp
52
vulnerability VCID-pvqw-sqms-aqg6
53
vulnerability VCID-pxg6-wvup-gkhb
54
vulnerability VCID-r243-r7yh-93d1
55
vulnerability VCID-rq96-5ke4-kqcd
56
vulnerability VCID-rxn9-7h5z-pyfm
57
vulnerability VCID-svwv-hc14-bfhj
58
vulnerability VCID-sw1n-sk71-y7bs
59
vulnerability VCID-sycr-3zm4-n7hm
60
vulnerability VCID-tcfq-uejs-nqbz
61
vulnerability VCID-tpw6-n6zr-tkcc
62
vulnerability VCID-u1gy-kwn1-3fgv
63
vulnerability VCID-u34s-hhf3-uyfy
64
vulnerability VCID-uct4-qg7n-fuh1
65
vulnerability VCID-ukcy-nczn-rfhz
66
vulnerability VCID-usku-z4hw-23dn
67
vulnerability VCID-vwzr-xk59-3ue5
68
vulnerability VCID-xrdb-kuj9-yffv
69
vulnerability VCID-xxfx-xxax-g3g2
70
vulnerability VCID-ygzv-hrfh-47gr
71
vulnerability VCID-ypv8-jnky-vkc4
72
vulnerability VCID-zgrb-9ta2-pqgu
73
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.10
aliases CVE-2022-0251, GHSA-f7q6-xxph-mfm8
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-wbbu-rkkp-ebbj
85
url VCID-xrdb-kuj9-yffv
vulnerability_id VCID-xrdb-kuj9-yffv
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-3822
reference_id
reference_type
scores
0
value 0.1097
scoring_system epss
scoring_elements 0.93587
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-3822
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-3822
reference_id
reference_type
scores
0
value 6.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-3822
2
reference_url https://huntr.dev/bounties/2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5
reference_id 2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5
reference_type
scores
0
value 6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
1
value 6.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:11:54Z/
url https://huntr.dev/bounties/2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5
3
reference_url https://github.com/pimcore/pimcore/commit/d75888a9b14baaad591548463cca09dfd1395236
reference_id d75888a9b14baaad591548463cca09dfd1395236
reference_type
scores
0
value 6
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
1
value 6.0
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-16T13:11:54Z/
url https://github.com/pimcore/pimcore/commit/d75888a9b14baaad591548463cca09dfd1395236
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.4
purl pkg:composer/pimcore/pimcore@10.6.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-hjs3-9b5k-e7c4
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.4
aliases CVE-2023-3822, GHSA-vmpv-qjhq-r463
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xrdb-kuj9-yffv
86
url VCID-xxfx-xxax-g3g2
vulnerability_id VCID-xxfx-xxax-g3g2
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-4453
reference_id
reference_type
scores
0
value 3e-05
scoring_system epss
scoring_elements 0.00114
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-4453
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-599v-h3q5-g6r9
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-599v-h3q5-g6r9
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-4453
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-4453
3
reference_url https://github.com/pimcore/pimcore/commit/234c0c02ea7502071b00ab673fbe4a6ac253080e
reference_id 234c0c02ea7502071b00ab673fbe4a6ac253080e
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-03T14:05:40Z/
url https://github.com/pimcore/pimcore/commit/234c0c02ea7502071b00ab673fbe4a6ac253080e
4
reference_url https://huntr.dev/bounties/245a8785-0fc0-4561-b181-fa20f869d993
reference_id 245a8785-0fc0-4561-b181-fa20f869d993
reference_type
scores
0
value 6.4
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track*
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2024-10-03T14:05:40Z/
url https://huntr.dev/bounties/245a8785-0fc0-4561-b181-fa20f869d993
5
reference_url https://github.com/advisories/GHSA-599v-h3q5-g6r9
reference_id GHSA-599v-h3q5-g6r9
reference_type
scores
url https://github.com/advisories/GHSA-599v-h3q5-g6r9
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.6.8
purl pkg:composer/pimcore/pimcore@10.6.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6uw7-89nn-tkg3
1
vulnerability VCID-afta-wcuy-4kah
2
vulnerability VCID-p5rs-jqqj-dudg
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.6.8
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-4453, GHSA-599v-h3q5-g6r9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xxfx-xxax-g3g2
87
url VCID-xzr8-6qq1-quaf
vulnerability_id VCID-xzr8-6qq1-quaf
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-23340
reference_id
reference_type
scores
0
value 0.00023
scoring_system epss
scoring_elements 0.06676
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-23340
1
reference_url https://github.com/pimcore/pimcore/blob/v6.7.2/bundles/AdminBundle/Controller/Reports/CustomReportController.php%23L454
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/blob/v6.7.2/bundles/AdminBundle/Controller/Reports/CustomReportController.php%23L454
2
reference_url https://github.com/pimcore/pimcore/commit/1786bdd4962ee51544fad537352c2b4223309442
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/1786bdd4962ee51544fad537352c2b4223309442
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-23340
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-23340
4
reference_url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1070132
reference_id
reference_type
scores
0
value 7.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1070132
fixed_packages
0
url pkg:composer/pimcore/pimcore@6.8.8
purl pkg:composer/pimcore/pimcore@6.8.8
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1e6u-83q7-kbcm
3
vulnerability VCID-1ghg-916g-5ycf
4
vulnerability VCID-2dhw-5ft3-4udh
5
vulnerability VCID-2n5e-7xn6-4ubt
6
vulnerability VCID-35c5-mzwz-8bgw
7
vulnerability VCID-3b57-hrf9-z3e2
8
vulnerability VCID-3hs9-ywbk-rbdy
9
vulnerability VCID-3q4h-tcnp-7qa1
10
vulnerability VCID-3xuv-b8w7-d7hf
11
vulnerability VCID-42kn-ucws-muhu
12
vulnerability VCID-4ar7-yac3-fkf7
13
vulnerability VCID-4jxn-m7de-5yay
14
vulnerability VCID-4n7p-vgv2-2qc3
15
vulnerability VCID-4tqk-ragu-h7ce
16
vulnerability VCID-5ds5-2ey4-u7gm
17
vulnerability VCID-6286-wv98-9uht
18
vulnerability VCID-6etn-5u58-sqgg
19
vulnerability VCID-6fw4-9qqw-bqen
20
vulnerability VCID-6uw7-89nn-tkg3
21
vulnerability VCID-6z66-zt5u-ybbc
22
vulnerability VCID-7191-wmtq-7fdg
23
vulnerability VCID-79ph-2nu8-4bhf
24
vulnerability VCID-7kzv-g2ns-e7gr
25
vulnerability VCID-7rvk-x76k-rkex
26
vulnerability VCID-843n-ga86-syg7
27
vulnerability VCID-8caz-76fk-x7er
28
vulnerability VCID-8d6u-y4zg-7bbq
29
vulnerability VCID-8jqk-yf3u-a3gn
30
vulnerability VCID-9d5s-3c9u-c7gg
31
vulnerability VCID-a9r6-chrk-9ffe
32
vulnerability VCID-afta-wcuy-4kah
33
vulnerability VCID-akv1-wzyh-fydj
34
vulnerability VCID-amnn-gf11-7yc2
35
vulnerability VCID-b4ba-atzn-wkay
36
vulnerability VCID-bed6-u2ht-dqgs
37
vulnerability VCID-c1pt-5z3d-wffr
38
vulnerability VCID-cgxg-fxyp-dfd8
39
vulnerability VCID-cr87-arup-w3gs
40
vulnerability VCID-d73k-kkeb-n3b5
41
vulnerability VCID-d8pe-27pm-xbfy
42
vulnerability VCID-e793-c5wh-yuaf
43
vulnerability VCID-eqbu-bpgy-1yd3
44
vulnerability VCID-f189-dkah-2ke1
45
vulnerability VCID-fcm6-y2yu-2uca
46
vulnerability VCID-gf98-8eeb-afc5
47
vulnerability VCID-ha9j-gnw7-rucq
48
vulnerability VCID-hdnj-vcx7-e7cw
49
vulnerability VCID-hjs3-9b5k-e7c4
50
vulnerability VCID-hmq1-yjsd-5fah
51
vulnerability VCID-hsfu-wneb-1kb3
52
vulnerability VCID-hzjc-d8zw-5bbf
53
vulnerability VCID-j76y-vhb3-4kc8
54
vulnerability VCID-k9su-rd5b-ubg9
55
vulnerability VCID-kq1j-jfjz-7yb2
56
vulnerability VCID-mhbd-nf8m-vfgf
57
vulnerability VCID-mmg6-qgw8-uffr
58
vulnerability VCID-mwcv-7yze-jyfe
59
vulnerability VCID-nsv2-svcf-83f1
60
vulnerability VCID-nyrx-zsbe-23g8
61
vulnerability VCID-p5rs-jqqj-dudg
62
vulnerability VCID-pe3m-swu2-wybk
63
vulnerability VCID-puqv-p29k-6bhv
64
vulnerability VCID-pvba-dkzz-xfc4
65
vulnerability VCID-pvq6-vk11-6qdp
66
vulnerability VCID-pvqw-sqms-aqg6
67
vulnerability VCID-pxg6-wvup-gkhb
68
vulnerability VCID-r243-r7yh-93d1
69
vulnerability VCID-rq96-5ke4-kqcd
70
vulnerability VCID-rxn9-7h5z-pyfm
71
vulnerability VCID-sft8-4vjf-4ygm
72
vulnerability VCID-sk99-1trk-syb4
73
vulnerability VCID-svwv-hc14-bfhj
74
vulnerability VCID-sw1n-sk71-y7bs
75
vulnerability VCID-sycr-3zm4-n7hm
76
vulnerability VCID-tcfq-uejs-nqbz
77
vulnerability VCID-tpw6-n6zr-tkcc
78
vulnerability VCID-u1gy-kwn1-3fgv
79
vulnerability VCID-u34s-hhf3-uyfy
80
vulnerability VCID-uct4-qg7n-fuh1
81
vulnerability VCID-ukcy-nczn-rfhz
82
vulnerability VCID-usku-z4hw-23dn
83
vulnerability VCID-vwzr-xk59-3ue5
84
vulnerability VCID-wbbu-rkkp-ebbj
85
vulnerability VCID-xrdb-kuj9-yffv
86
vulnerability VCID-xxfx-xxax-g3g2
87
vulnerability VCID-y9m4-cwvv-mbhe
88
vulnerability VCID-ygzv-hrfh-47gr
89
vulnerability VCID-ypv8-jnky-vkc4
90
vulnerability VCID-zbvh-bt4c-e3em
91
vulnerability VCID-zgrb-9ta2-pqgu
92
vulnerability VCID-zxa3-m253-gug3
93
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@6.8.8
aliases CVE-2021-23340, GHSA-h7f9-cvh5-qw7f
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-xzr8-6qq1-quaf
88
url VCID-y9m4-cwvv-mbhe
vulnerability_id VCID-y9m4-cwvv-mbhe
summary pimcore is vulnerable to Cross-site Scripting
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-4081
reference_id
reference_type
scores
0
value 0.00014
scoring_system epss
scoring_elements 0.02534
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-4081
1
reference_url https://github.com/pimcore/pimcore/commit/34ed0e050ff679b4b38414aef48ea1ff956f907a
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/34ed0e050ff679b4b38414aef48ea1ff956f907a
2
reference_url https://huntr.dev/bounties/da173e66-76ba-4f98-b8fb-429aabf222d3
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/da173e66-76ba-4f98-b8fb-429aabf222d3
3
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-4081
reference_id CVE-2021-4081
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-4081
4
reference_url https://github.com/advisories/GHSA-3p85-p4qg-hcrp
reference_id GHSA-3p85-p4qg-hcrp
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3p85-p4qg-hcrp
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.6
purl pkg:composer/pimcore/pimcore@10.2.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-eqbu-bpgy-1yd3
39
vulnerability VCID-f189-dkah-2ke1
40
vulnerability VCID-fcm6-y2yu-2uca
41
vulnerability VCID-gf98-8eeb-afc5
42
vulnerability VCID-ha9j-gnw7-rucq
43
vulnerability VCID-hdnj-vcx7-e7cw
44
vulnerability VCID-hjs3-9b5k-e7c4
45
vulnerability VCID-hsfu-wneb-1kb3
46
vulnerability VCID-hzjc-d8zw-5bbf
47
vulnerability VCID-j76y-vhb3-4kc8
48
vulnerability VCID-k9su-rd5b-ubg9
49
vulnerability VCID-kq1j-jfjz-7yb2
50
vulnerability VCID-mhbd-nf8m-vfgf
51
vulnerability VCID-mmg6-qgw8-uffr
52
vulnerability VCID-mwcv-7yze-jyfe
53
vulnerability VCID-nsv2-svcf-83f1
54
vulnerability VCID-nyrx-zsbe-23g8
55
vulnerability VCID-p5rs-jqqj-dudg
56
vulnerability VCID-puqv-p29k-6bhv
57
vulnerability VCID-pvq6-vk11-6qdp
58
vulnerability VCID-pvqw-sqms-aqg6
59
vulnerability VCID-pxg6-wvup-gkhb
60
vulnerability VCID-r243-r7yh-93d1
61
vulnerability VCID-rq96-5ke4-kqcd
62
vulnerability VCID-rxn9-7h5z-pyfm
63
vulnerability VCID-sft8-4vjf-4ygm
64
vulnerability VCID-svwv-hc14-bfhj
65
vulnerability VCID-sw1n-sk71-y7bs
66
vulnerability VCID-sycr-3zm4-n7hm
67
vulnerability VCID-tcfq-uejs-nqbz
68
vulnerability VCID-tpw6-n6zr-tkcc
69
vulnerability VCID-u1gy-kwn1-3fgv
70
vulnerability VCID-u34s-hhf3-uyfy
71
vulnerability VCID-uct4-qg7n-fuh1
72
vulnerability VCID-ukcy-nczn-rfhz
73
vulnerability VCID-usku-z4hw-23dn
74
vulnerability VCID-vwzr-xk59-3ue5
75
vulnerability VCID-xrdb-kuj9-yffv
76
vulnerability VCID-xxfx-xxax-g3g2
77
vulnerability VCID-ygzv-hrfh-47gr
78
vulnerability VCID-ypv8-jnky-vkc4
79
vulnerability VCID-zgrb-9ta2-pqgu
80
vulnerability VCID-zxa3-m253-gug3
81
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.6
aliases CVE-2021-4081, GHSA-3p85-p4qg-hcrp
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-y9m4-cwvv-mbhe
89
url VCID-ygzv-hrfh-47gr
vulnerability_id VCID-ygzv-hrfh-47gr
summary Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1312
reference_id
reference_type
scores
0
value 0.00035
scoring_system epss
scoring_elements 0.1083
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1312
1
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
reference_id
reference_type
scores
0
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1312
2
reference_url https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356
reference_id 2a64a32d-b1cc-4def-91da-18040d59f356
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T15:36:24Z/
url https://huntr.dev/bounties/2a64a32d-b1cc-4def-91da-18040d59f356
3
reference_url https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
reference_id d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
reference_type
scores
0
value 5.2
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
1
value 4.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-02-28T15:36:24Z/
url https://github.com/pimcore/pimcore/commit/d35d0712858f24d0ec96ddfd4cbe82ff4b5a5fbb
4
reference_url https://github.com/advisories/GHSA-gh4g-65f6-84g5
reference_id GHSA-gh4g-65f6-84g5
reference_type
scores
url https://github.com/advisories/GHSA-gh4g-65f6-84g5
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.19
purl pkg:composer/pimcore/pimcore@10.5.19
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2dhw-5ft3-4udh
1
vulnerability VCID-3b57-hrf9-z3e2
2
vulnerability VCID-3hs9-ywbk-rbdy
3
vulnerability VCID-4ar7-yac3-fkf7
4
vulnerability VCID-4jxn-m7de-5yay
5
vulnerability VCID-4n7p-vgv2-2qc3
6
vulnerability VCID-4tqk-ragu-h7ce
7
vulnerability VCID-6fw4-9qqw-bqen
8
vulnerability VCID-6uw7-89nn-tkg3
9
vulnerability VCID-7191-wmtq-7fdg
10
vulnerability VCID-8jqk-yf3u-a3gn
11
vulnerability VCID-9d5s-3c9u-c7gg
12
vulnerability VCID-afta-wcuy-4kah
13
vulnerability VCID-e793-c5wh-yuaf
14
vulnerability VCID-hjs3-9b5k-e7c4
15
vulnerability VCID-hsfu-wneb-1kb3
16
vulnerability VCID-j76y-vhb3-4kc8
17
vulnerability VCID-kq1j-jfjz-7yb2
18
vulnerability VCID-mmg6-qgw8-uffr
19
vulnerability VCID-nsv2-svcf-83f1
20
vulnerability VCID-p5rs-jqqj-dudg
21
vulnerability VCID-pvq6-vk11-6qdp
22
vulnerability VCID-r243-r7yh-93d1
23
vulnerability VCID-rq96-5ke4-kqcd
24
vulnerability VCID-rxn9-7h5z-pyfm
25
vulnerability VCID-tcfq-uejs-nqbz
26
vulnerability VCID-tpw6-n6zr-tkcc
27
vulnerability VCID-uct4-qg7n-fuh1
28
vulnerability VCID-usku-z4hw-23dn
29
vulnerability VCID-xrdb-kuj9-yffv
30
vulnerability VCID-xxfx-xxax-g3g2
31
vulnerability VCID-ypv8-jnky-vkc4
32
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.19
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1312, GHSA-gh4g-65f6-84g5
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ygzv-hrfh-47gr
90
url VCID-ypv8-jnky-vkc4
vulnerability_id VCID-ypv8-jnky-vkc4
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-2323
reference_id
reference_type
scores
0
value 7e-05
scoring_system epss
scoring_elements 0.00677
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-2323
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-cjv6-w5hf-5wr6
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-cjv6-w5hf-5wr6
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-2323
reference_id
reference_type
scores
0
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-2323
3
reference_url https://huntr.dev/bounties/41edf190-f6bf-4a29-a237-7ff1b2d048d3
reference_id 41edf190-f6bf-4a29-a237-7ff1b2d048d3
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:50Z/
url https://huntr.dev/bounties/41edf190-f6bf-4a29-a237-7ff1b2d048d3
4
reference_url https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e
reference_id e88fa79de7b5903fb58ddbc231130b04d937d79e
reference_type
scores
0
value 6.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
1
value 6.8
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-31T18:33:50Z/
url https://github.com/pimcore/pimcore/commit/e88fa79de7b5903fb58ddbc231130b04d937d79e
5
reference_url https://github.com/advisories/GHSA-cjv6-w5hf-5wr6
reference_id GHSA-cjv6-w5hf-5wr6
reference_type
scores
url https://github.com/advisories/GHSA-cjv6-w5hf-5wr6
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-2323, GHSA-cjv6-w5hf-5wr6
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ypv8-jnky-vkc4
91
url VCID-zbvh-bt4c-e3em
vulnerability_id VCID-zbvh-bt4c-e3em
summary
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2021-39189
reference_id
reference_type
scores
0
value 0.0002
scoring_system epss
scoring_elements 0.05793
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2021-39189
1
reference_url https://github.com/pimcore/pimcore/pull/10223/commits/d0a4de39cf05dce6af71f8ca039132bdfcbb0dce
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/10223/commits/d0a4de39cf05dce6af71f8ca039132bdfcbb0dce
2
reference_url https://github.com/pimcore/pimcore/pull/10223.patch
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/10223.patch
3
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-579x-cjvr-cqj9
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-579x-cjvr-cqj9
4
reference_url https://huntr.dev/bounties/12462a99-ebf8-4e39-80b3-54a16caa3f4c
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/12462a99-ebf8-4e39-80b3-54a16caa3f4c
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2021-39189
reference_id
reference_type
scores
0
value 5.3
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2021-39189
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.1.3
purl pkg:composer/pimcore/pimcore@10.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-cr87-arup-w3gs
38
vulnerability VCID-d73k-kkeb-n3b5
39
vulnerability VCID-d8pe-27pm-xbfy
40
vulnerability VCID-e793-c5wh-yuaf
41
vulnerability VCID-eqbu-bpgy-1yd3
42
vulnerability VCID-f189-dkah-2ke1
43
vulnerability VCID-fcm6-y2yu-2uca
44
vulnerability VCID-gf98-8eeb-afc5
45
vulnerability VCID-ha9j-gnw7-rucq
46
vulnerability VCID-hdnj-vcx7-e7cw
47
vulnerability VCID-hjs3-9b5k-e7c4
48
vulnerability VCID-hsfu-wneb-1kb3
49
vulnerability VCID-hzjc-d8zw-5bbf
50
vulnerability VCID-j76y-vhb3-4kc8
51
vulnerability VCID-k9su-rd5b-ubg9
52
vulnerability VCID-kq1j-jfjz-7yb2
53
vulnerability VCID-mhbd-nf8m-vfgf
54
vulnerability VCID-mmg6-qgw8-uffr
55
vulnerability VCID-mwcv-7yze-jyfe
56
vulnerability VCID-nsv2-svcf-83f1
57
vulnerability VCID-nyrx-zsbe-23g8
58
vulnerability VCID-p5rs-jqqj-dudg
59
vulnerability VCID-puqv-p29k-6bhv
60
vulnerability VCID-pvba-dkzz-xfc4
61
vulnerability VCID-pvq6-vk11-6qdp
62
vulnerability VCID-pvqw-sqms-aqg6
63
vulnerability VCID-pxg6-wvup-gkhb
64
vulnerability VCID-r243-r7yh-93d1
65
vulnerability VCID-rq96-5ke4-kqcd
66
vulnerability VCID-rxn9-7h5z-pyfm
67
vulnerability VCID-sft8-4vjf-4ygm
68
vulnerability VCID-svwv-hc14-bfhj
69
vulnerability VCID-sw1n-sk71-y7bs
70
vulnerability VCID-sycr-3zm4-n7hm
71
vulnerability VCID-tcfq-uejs-nqbz
72
vulnerability VCID-tpw6-n6zr-tkcc
73
vulnerability VCID-u1gy-kwn1-3fgv
74
vulnerability VCID-u34s-hhf3-uyfy
75
vulnerability VCID-uct4-qg7n-fuh1
76
vulnerability VCID-ukcy-nczn-rfhz
77
vulnerability VCID-usku-z4hw-23dn
78
vulnerability VCID-vwzr-xk59-3ue5
79
vulnerability VCID-wbbu-rkkp-ebbj
80
vulnerability VCID-xrdb-kuj9-yffv
81
vulnerability VCID-xxfx-xxax-g3g2
82
vulnerability VCID-y9m4-cwvv-mbhe
83
vulnerability VCID-ygzv-hrfh-47gr
84
vulnerability VCID-ypv8-jnky-vkc4
85
vulnerability VCID-zgrb-9ta2-pqgu
86
vulnerability VCID-zxa3-m253-gug3
87
vulnerability VCID-zzzx-vnz8-fuhc
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.1.3
aliases CVE-2021-39189, GHSA-579x-cjvr-cqj9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zbvh-bt4c-e3em
92
url VCID-zgrb-9ta2-pqgu
vulnerability_id VCID-zgrb-9ta2-pqgu
summary Pimcore is an open source data and experience management platform. Prior to version 10.5.21, A SQL injection vulnerability exists in the translation export API. Users should update to version 10.5.21 to receive a patch or, as a workaround, or apply the patch manually.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-30849
reference_id
reference_type
scores
0
value 0.00064
scoring_system epss
scoring_elements 0.20229
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-30849
1
reference_url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-30849
reference_id
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-30849
3
reference_url https://github.com/pimcore/pimcore/pull/14968
reference_id 14968
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-31T18:17:25Z/
url https://github.com/pimcore/pimcore/pull/14968
4
reference_url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
reference_id c6c80905e58c7724c776f980570a56df7016c6d1.patch
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-31T18:17:25Z/
url https://github.com/pimcore/pimcore/commit/c6c80905e58c7724c776f980570a56df7016c6d1.patch
5
reference_url https://github.com/advisories/GHSA-xmg8-w465-mr56
reference_id GHSA-xmg8-w465-mr56
reference_type
scores
url https://github.com/advisories/GHSA-xmg8-w465-mr56
6
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56
reference_id GHSA-xmg8-w465-mr56
reference_type
scores
0
value 8.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-31T18:17:25Z/
url https://github.com/pimcore/pimcore/security/advisories/GHSA-xmg8-w465-mr56
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.21
purl pkg:composer/pimcore/pimcore@10.5.21
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-4ar7-yac3-fkf7
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-9d5s-3c9u-c7gg
3
vulnerability VCID-afta-wcuy-4kah
4
vulnerability VCID-hjs3-9b5k-e7c4
5
vulnerability VCID-j76y-vhb3-4kc8
6
vulnerability VCID-nsv2-svcf-83f1
7
vulnerability VCID-p5rs-jqqj-dudg
8
vulnerability VCID-rq96-5ke4-kqcd
9
vulnerability VCID-usku-z4hw-23dn
10
vulnerability VCID-xrdb-kuj9-yffv
11
vulnerability VCID-xxfx-xxax-g3g2
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.21
aliases CVE-2023-30849, GHSA-xmg8-w465-mr56
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zgrb-9ta2-pqgu
93
url VCID-zxa3-m253-gug3
vulnerability_id VCID-zxa3-m253-gug3
summary Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-1117
reference_id
reference_type
scores
0
value 8e-05
scoring_system epss
scoring_elements 0.00774
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-1117
1
reference_url https://github.com/pimcore/pimcore/security/advisories/GHSA-qxcw-rf4v-hp26
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/security/advisories/GHSA-qxcw-rf4v-hp26
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-1117
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-1117
3
reference_url https://github.com/pimcore/pimcore/commit/b9ba69f66d6a9986fb36f239661b98cd33a89853
reference_id b9ba69f66d6a9986fb36f239661b98cd33a89853
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:19Z/
url https://github.com/pimcore/pimcore/commit/b9ba69f66d6a9986fb36f239661b98cd33a89853
4
reference_url https://huntr.dev/bounties/e8c0044d-a31b-4347-b2d5-59fbf492da39
reference_id e8c0044d-a31b-4347-b2d5-59fbf492da39
reference_type
scores
0
value 4.8
scoring_system cvssv3
scoring_elements CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:L
1
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
2
value MODERATE
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-03-07T18:32:19Z/
url https://huntr.dev/bounties/e8c0044d-a31b-4347-b2d5-59fbf492da39
5
reference_url https://github.com/advisories/GHSA-qxcw-rf4v-hp26
reference_id GHSA-qxcw-rf4v-hp26
reference_type
scores
url https://github.com/advisories/GHSA-qxcw-rf4v-hp26
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.5.18
purl pkg:composer/pimcore/pimcore@10.5.18
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1ghg-916g-5ycf
1
vulnerability VCID-2dhw-5ft3-4udh
2
vulnerability VCID-35c5-mzwz-8bgw
3
vulnerability VCID-3b57-hrf9-z3e2
4
vulnerability VCID-3hs9-ywbk-rbdy
5
vulnerability VCID-3q4h-tcnp-7qa1
6
vulnerability VCID-4ar7-yac3-fkf7
7
vulnerability VCID-4jxn-m7de-5yay
8
vulnerability VCID-4n7p-vgv2-2qc3
9
vulnerability VCID-4tqk-ragu-h7ce
10
vulnerability VCID-6286-wv98-9uht
11
vulnerability VCID-6fw4-9qqw-bqen
12
vulnerability VCID-6uw7-89nn-tkg3
13
vulnerability VCID-7191-wmtq-7fdg
14
vulnerability VCID-7rvk-x76k-rkex
15
vulnerability VCID-843n-ga86-syg7
16
vulnerability VCID-8jqk-yf3u-a3gn
17
vulnerability VCID-9d5s-3c9u-c7gg
18
vulnerability VCID-a9r6-chrk-9ffe
19
vulnerability VCID-afta-wcuy-4kah
20
vulnerability VCID-b4ba-atzn-wkay
21
vulnerability VCID-e793-c5wh-yuaf
22
vulnerability VCID-fcm6-y2yu-2uca
23
vulnerability VCID-hjs3-9b5k-e7c4
24
vulnerability VCID-hsfu-wneb-1kb3
25
vulnerability VCID-j76y-vhb3-4kc8
26
vulnerability VCID-kq1j-jfjz-7yb2
27
vulnerability VCID-mmg6-qgw8-uffr
28
vulnerability VCID-nsv2-svcf-83f1
29
vulnerability VCID-nyrx-zsbe-23g8
30
vulnerability VCID-p5rs-jqqj-dudg
31
vulnerability VCID-puqv-p29k-6bhv
32
vulnerability VCID-pvq6-vk11-6qdp
33
vulnerability VCID-r243-r7yh-93d1
34
vulnerability VCID-rq96-5ke4-kqcd
35
vulnerability VCID-rxn9-7h5z-pyfm
36
vulnerability VCID-sycr-3zm4-n7hm
37
vulnerability VCID-tcfq-uejs-nqbz
38
vulnerability VCID-tpw6-n6zr-tkcc
39
vulnerability VCID-uct4-qg7n-fuh1
40
vulnerability VCID-usku-z4hw-23dn
41
vulnerability VCID-xrdb-kuj9-yffv
42
vulnerability VCID-xxfx-xxax-g3g2
43
vulnerability VCID-ygzv-hrfh-47gr
44
vulnerability VCID-ypv8-jnky-vkc4
45
vulnerability VCID-zgrb-9ta2-pqgu
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.5.18
1
url pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
purl pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-35c5-mzwz-8bgw
1
vulnerability VCID-6uw7-89nn-tkg3
2
vulnerability VCID-afta-wcuy-4kah
3
vulnerability VCID-p5rs-jqqj-dudg
4
vulnerability VCID-phk5-1sq4-t3gn
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@11.0.0-ALPHA1
aliases CVE-2023-1117, GHSA-qxcw-rf4v-hp26
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zxa3-m253-gug3
94
url VCID-zzzx-vnz8-fuhc
vulnerability_id VCID-zzzx-vnz8-fuhc
summary Cross-site Scripting in pimcore
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2022-0260
reference_id
reference_type
scores
0
value 0.00028
scoring_system epss
scoring_elements 0.08317
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2022-0260
1
reference_url https://github.com/pimcore/pimcore/commit/3125d5f0c04cfb5835857ca9416f0bb143130a2f
reference_id
reference_type
scores
url https://github.com/pimcore/pimcore/commit/3125d5f0c04cfb5835857ca9416f0bb143130a2f
2
reference_url https://github.com/pimcore/pimcore/commit/665976327ad3c2c87efa2a5a64d696032c0a8109
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/commit/665976327ad3c2c87efa2a5a64d696032c0a8109
3
reference_url https://github.com/pimcore/pimcore/pull/11205
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/pimcore/pimcore/pull/11205
4
reference_url https://huntr.dev/bounties/89e4ab60-21ec-4396-92ad-5b78d4c2897e
reference_id
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://huntr.dev/bounties/89e4ab60-21ec-4396-92ad-5b78d4c2897e
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2022-0260
reference_id CVE-2022-0260
reference_type
scores
0
value 5.4
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2022-0260
6
reference_url https://github.com/advisories/GHSA-455w-gv5p-wgg3
reference_id GHSA-455w-gv5p-wgg3
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-455w-gv5p-wgg3
fixed_packages
0
url pkg:composer/pimcore/pimcore@10.2.7
purl pkg:composer/pimcore/pimcore@10.2.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-cgxg-fxyp-dfd8
37
vulnerability VCID-e793-c5wh-yuaf
38
vulnerability VCID-fcm6-y2yu-2uca
39
vulnerability VCID-gf98-8eeb-afc5
40
vulnerability VCID-ha9j-gnw7-rucq
41
vulnerability VCID-hdnj-vcx7-e7cw
42
vulnerability VCID-hjs3-9b5k-e7c4
43
vulnerability VCID-hsfu-wneb-1kb3
44
vulnerability VCID-hzjc-d8zw-5bbf
45
vulnerability VCID-j76y-vhb3-4kc8
46
vulnerability VCID-k9su-rd5b-ubg9
47
vulnerability VCID-kq1j-jfjz-7yb2
48
vulnerability VCID-mhbd-nf8m-vfgf
49
vulnerability VCID-mmg6-qgw8-uffr
50
vulnerability VCID-mwcv-7yze-jyfe
51
vulnerability VCID-nsv2-svcf-83f1
52
vulnerability VCID-nyrx-zsbe-23g8
53
vulnerability VCID-p5rs-jqqj-dudg
54
vulnerability VCID-puqv-p29k-6bhv
55
vulnerability VCID-pvq6-vk11-6qdp
56
vulnerability VCID-pvqw-sqms-aqg6
57
vulnerability VCID-pxg6-wvup-gkhb
58
vulnerability VCID-r243-r7yh-93d1
59
vulnerability VCID-rq96-5ke4-kqcd
60
vulnerability VCID-rxn9-7h5z-pyfm
61
vulnerability VCID-svwv-hc14-bfhj
62
vulnerability VCID-sw1n-sk71-y7bs
63
vulnerability VCID-sycr-3zm4-n7hm
64
vulnerability VCID-tcfq-uejs-nqbz
65
vulnerability VCID-tpw6-n6zr-tkcc
66
vulnerability VCID-u1gy-kwn1-3fgv
67
vulnerability VCID-u34s-hhf3-uyfy
68
vulnerability VCID-uct4-qg7n-fuh1
69
vulnerability VCID-ukcy-nczn-rfhz
70
vulnerability VCID-usku-z4hw-23dn
71
vulnerability VCID-vwzr-xk59-3ue5
72
vulnerability VCID-xrdb-kuj9-yffv
73
vulnerability VCID-xxfx-xxax-g3g2
74
vulnerability VCID-ygzv-hrfh-47gr
75
vulnerability VCID-ypv8-jnky-vkc4
76
vulnerability VCID-zgrb-9ta2-pqgu
77
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.7
1
url pkg:composer/pimcore/pimcore@10.2.9
purl pkg:composer/pimcore/pimcore@10.2.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-16vs-u1gr-g3ch
1
vulnerability VCID-19kg-dggk-9bgb
2
vulnerability VCID-1ghg-916g-5ycf
3
vulnerability VCID-2dhw-5ft3-4udh
4
vulnerability VCID-2n5e-7xn6-4ubt
5
vulnerability VCID-35c5-mzwz-8bgw
6
vulnerability VCID-3b57-hrf9-z3e2
7
vulnerability VCID-3hs9-ywbk-rbdy
8
vulnerability VCID-3q4h-tcnp-7qa1
9
vulnerability VCID-3xuv-b8w7-d7hf
10
vulnerability VCID-4ar7-yac3-fkf7
11
vulnerability VCID-4jxn-m7de-5yay
12
vulnerability VCID-4n7p-vgv2-2qc3
13
vulnerability VCID-4tqk-ragu-h7ce
14
vulnerability VCID-5ds5-2ey4-u7gm
15
vulnerability VCID-6286-wv98-9uht
16
vulnerability VCID-6etn-5u58-sqgg
17
vulnerability VCID-6fw4-9qqw-bqen
18
vulnerability VCID-6uw7-89nn-tkg3
19
vulnerability VCID-6z66-zt5u-ybbc
20
vulnerability VCID-7191-wmtq-7fdg
21
vulnerability VCID-79ph-2nu8-4bhf
22
vulnerability VCID-7kzv-g2ns-e7gr
23
vulnerability VCID-7rvk-x76k-rkex
24
vulnerability VCID-843n-ga86-syg7
25
vulnerability VCID-8caz-76fk-x7er
26
vulnerability VCID-8d6u-y4zg-7bbq
27
vulnerability VCID-8jqk-yf3u-a3gn
28
vulnerability VCID-9d5s-3c9u-c7gg
29
vulnerability VCID-a9r6-chrk-9ffe
30
vulnerability VCID-afta-wcuy-4kah
31
vulnerability VCID-akv1-wzyh-fydj
32
vulnerability VCID-amnn-gf11-7yc2
33
vulnerability VCID-b4ba-atzn-wkay
34
vulnerability VCID-bed6-u2ht-dqgs
35
vulnerability VCID-c1pt-5z3d-wffr
36
vulnerability VCID-e793-c5wh-yuaf
37
vulnerability VCID-fcm6-y2yu-2uca
38
vulnerability VCID-gf98-8eeb-afc5
39
vulnerability VCID-hdnj-vcx7-e7cw
40
vulnerability VCID-hjs3-9b5k-e7c4
41
vulnerability VCID-hsfu-wneb-1kb3
42
vulnerability VCID-j76y-vhb3-4kc8
43
vulnerability VCID-k9su-rd5b-ubg9
44
vulnerability VCID-kq1j-jfjz-7yb2
45
vulnerability VCID-mmg6-qgw8-uffr
46
vulnerability VCID-mwcv-7yze-jyfe
47
vulnerability VCID-nsv2-svcf-83f1
48
vulnerability VCID-nyrx-zsbe-23g8
49
vulnerability VCID-p5rs-jqqj-dudg
50
vulnerability VCID-puqv-p29k-6bhv
51
vulnerability VCID-pvba-dkzz-xfc4
52
vulnerability VCID-pvq6-vk11-6qdp
53
vulnerability VCID-pvqw-sqms-aqg6
54
vulnerability VCID-pxg6-wvup-gkhb
55
vulnerability VCID-r243-r7yh-93d1
56
vulnerability VCID-rq96-5ke4-kqcd
57
vulnerability VCID-rxn9-7h5z-pyfm
58
vulnerability VCID-svwv-hc14-bfhj
59
vulnerability VCID-sw1n-sk71-y7bs
60
vulnerability VCID-sycr-3zm4-n7hm
61
vulnerability VCID-tcfq-uejs-nqbz
62
vulnerability VCID-tpw6-n6zr-tkcc
63
vulnerability VCID-u1gy-kwn1-3fgv
64
vulnerability VCID-u34s-hhf3-uyfy
65
vulnerability VCID-uct4-qg7n-fuh1
66
vulnerability VCID-ukcy-nczn-rfhz
67
vulnerability VCID-usku-z4hw-23dn
68
vulnerability VCID-vwzr-xk59-3ue5
69
vulnerability VCID-xrdb-kuj9-yffv
70
vulnerability VCID-xxfx-xxax-g3g2
71
vulnerability VCID-ygzv-hrfh-47gr
72
vulnerability VCID-ypv8-jnky-vkc4
73
vulnerability VCID-zgrb-9ta2-pqgu
74
vulnerability VCID-zxa3-m253-gug3
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@10.2.9
aliases CVE-2022-0260, GHSA-455w-gv5p-wgg3
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zzzx-vnz8-fuhc
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/pimcore/pimcore@6.5.2