| Package | Affected versions | Patched versions |
|---|---|---|
| pimcore/pimcore | < 10.0.7 | 10.0.7 |
| pimcore | < 10.0.7 | 10.0.7 |
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free