Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations

概要

参考情報

• pimcore/pimcore security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2023-2630 · ADVISORY
• pimcore/pimcore commit 7e32cc2 · WEB
• pimcore/pimcore · PACKAGE
• huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e · WEB

pimcore/pimcore のその他の脆弱性

• CVE-2026-55416高 8.8Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, an authenticated user with reports…
• CVE-2026-55072高 8.5Pimcore is an Open Source Data & Experience Management Platform. Prior to 2026.1.5, an authenticated user with the objects permission can su…
• CVE-2026-55634緊急 9.9Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, the class-definition import endpoi…
• CVE-2026-55220緊急 9.3Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.19, 12.3.10, and 2026.1.6, Pimcore\Model\DataObject\ClassDefi…
• CVE-2026-45704高 7.1Pimcore is an Open Source Data & Experience Management Platform. Prior to 11.5.17 (LTS) and 12.3.6, CustomReports uses inconsistent authoriz…