| Package | Affected versions | Patched versions |
|---|---|---|
| pimcore/demo | < 10.3.0 | 10.3.0 |
| core | < 10.3.0 | 10.3.0 |
Introspection is enabled on demo.pimcore.fun. The demo site has graphql as a feature for users, but allows users to run instropection queries, which presents a potential schema information disclosure vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free