Em resumo
- CVE-2021-23405 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta pimcore/pimcore, pimcore (pimcore).
- Chance de exploração nos próximos 30 dias (EPSS): 1.7%, maior que 77.4% das vulnerabilidades.
- Correção: atualize para 10.0.7 ou posterior.
Description
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.
NVD description
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.
Mais vulnerabilidades de pimcore/pimcore
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free