| Package | Affected versions | Patched versions |
|---|---|---|
| pimcore/pimcore | < 10.5.21 | 10.5.21 |
| pimcore | < 10.5.21 | 10.5.21 |
Execute Javascript code on victim browsers and potentially steal cookies to takeover their account.
Update to version 10.5.21 or apply this patches manually https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
Apply patches manually: https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
https://huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e/
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free