Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-b518-ye2d-sbdh
Vulnerability ID VCID-b518-ye2d-sbdh
Aliases CVE-2024-32871
GHSA-277c-5vvj-9pwx
Summary
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (3)
CWE-770 Allocation of Resources Without Limits or Throttling
CWE-937 OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
CWE-1035 OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
System Score Found at
epss 8e-05 https://api.first.org/data/v1/epss?cve=CVE-2024-32871
cvssv3.1_qr HIGH https://github.com/advisories/GHSA-277c-5vvj-9pwx
cvssv3.1 7.5 https://github.com/pimcore/pimcore
generic_textual HIGH https://github.com/pimcore/pimcore
cvssv3.1 7.5 https://github.com/pimcore/pimcore/commit/38af70b3130f16fc27f2aea34e2943d7bdaaba06
generic_textual HIGH https://github.com/pimcore/pimcore/commit/38af70b3130f16fc27f2aea34e2943d7bdaaba06
ssvc Track https://github.com/pimcore/pimcore/commit/38af70b3130f16fc27f2aea34e2943d7bdaaba06
cvssv3.1 7.5 https://github.com/pimcore/pimcore/commit/a6821a16ea38086bf6012e682e1743488244bd85
generic_textual HIGH https://github.com/pimcore/pimcore/commit/a6821a16ea38086bf6012e682e1743488244bd85
ssvc Track https://github.com/pimcore/pimcore/commit/a6821a16ea38086bf6012e682e1743488244bd85
cvssv3.1 7.5 https://github.com/pimcore/pimcore/security/advisories/GHSA-277c-5vvj-9pwx
cvssv3.1_qr HIGH https://github.com/pimcore/pimcore/security/advisories/GHSA-277c-5vvj-9pwx
generic_textual HIGH https://github.com/pimcore/pimcore/security/advisories/GHSA-277c-5vvj-9pwx
ssvc Track https://github.com/pimcore/pimcore/security/advisories/GHSA-277c-5vvj-9pwx
cvssv3.1 7.5 https://nvd.nist.gov/vuln/detail/CVE-2024-32871
generic_textual HIGH https://nvd.nist.gov/vuln/detail/CVE-2024-32871
Reference id Reference type URL
https://api.first.org/data/v1/epss?cve=CVE-2024-32871
https://github.com/pimcore/pimcore
https://github.com/pimcore/pimcore/commit/38af70b3130f16fc27f2aea34e2943d7bdaaba06
https://github.com/pimcore/pimcore/commit/a6821a16ea38086bf6012e682e1743488244bd85
CVE-2024-32871 https://nvd.nist.gov/vuln/detail/CVE-2024-32871
GHSA-277c-5vvj-9pwx https://github.com/advisories/GHSA-277c-5vvj-9pwx
GHSA-277c-5vvj-9pwx https://github.com/pimcore/pimcore/security/advisories/GHSA-277c-5vvj-9pwx
No exploits are available.
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/pimcore/pimcore
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/pimcore/pimcore/commit/38af70b3130f16fc27f2aea34e2943d7bdaaba06
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-04T15:25:35Z/ Found at https://github.com/pimcore/pimcore/commit/38af70b3130f16fc27f2aea34e2943d7bdaaba06
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/pimcore/pimcore/commit/a6821a16ea38086bf6012e682e1743488244bd85
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-04T15:25:35Z/ Found at https://github.com/pimcore/pimcore/commit/a6821a16ea38086bf6012e682e1743488244bd85
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://github.com/pimcore/pimcore/security/advisories/GHSA-277c-5vvj-9pwx
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Vector: SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-04T15:25:35Z/ Found at https://github.com/pimcore/pimcore/security/advisories/GHSA-277c-5vvj-9pwx
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Found at https://nvd.nist.gov/vuln/detail/CVE-2024-32871
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none
Exploit Prediction Scoring System (EPSS)
Percentile 0.00828
EPSS Score 8e-05
Published At May 30, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-05-30T22:39:49.883064+00:00 EPSS Importer Import https://epss.cyentia.com/epss_scores-current.csv.gz 38.6.0