| Package | Affected versions | Patched versions |
|---|---|---|
| akeneo/pim-community-dev | ≥ 1.4, < 1.4.28≥ 1.5, < 1.5.15≥ 1.6, < 1.6.6 | 1.4.281.5.151.6.6 |
| product information management | = 1.4.0= 1.4.1= 1.4.10= 1.4.11= 1.4.12= 1.4.13= 1.4.14= 1.4.15= 1.4.16= 1.4.17= 1.4.18= 1.4.19= 1.4.2= 1.4.20= 1.4.21= 1.4.22= 1.4.23= 1.4.24= 1.4.25= 1.4.26= 1.4.27= 1.4.3= 1.4.4= 1.4.5= 1.4.6= 1.4.7= 1.4.8= 1.4.9= 1.5.0= 1.5.1= 1.5.10= 1.5.11= 1.5.12= 1.5.13= 1.5.14= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.5.6= 1.5.7= 1.5.8= 1.5.9= 1.6.0= 1.6.1= 1.6.2= 1.6.3= 1.6.4= 1.6.5 |
Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free