Pimcore vulnerable to Business Logic Errors via Customer automation rules

概要

参考情報

• pimcore/customer-data-framework security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2023-32075 · ADVISORY
• pimcore/customer-data-framework commit e3f3333 · WEB
• pimcore/customer-data-framework · PACKAGE
• pimcore/customer-data-framework release v3.3.9 · WEB
• huntr.dev/bounties/cecd7800-a996-4f3a-8689-e1c2a1e0248a · WEB
• huntr.dev/bounties/cecd7800-a996-4f3a-8689-e1c2a1e0248a · Exploit

pimcore/customer-management-framework-bundle のその他の脆弱性

• CVE-2024-11956高 7.2A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affected by this issue is …
• CVE-2024-21667中 6.5pimcore/customer-data-framework is the Customer Management Framework for management of customer data within Pimcore. An authenticated and un…
• CVE-2024-21666中 6.5The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management, segmentation, personalization and marke…
• CVE-2023-4145中 5.4Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.
• CVE-2023-3574中 6.5Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.