Page 6 of 112 results (0.002 seconds)

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2338 – SQL Injection in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2023-2338

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21. • https://github.com/pimcore/pimcore/commit/21e35af721c375ef4676ed50835e30d828e76520 https://huntr.dev/bounties/bbf59fa7-cf5b-4945-81b0-328adc710462 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2327 – Cross-site Scripting (XSS) - Stored in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2023-2327

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21. • https://github.com/pimcore/pimcore/commit/fb3056a21d439135480ee299bf1ab646867b5f4f https://huntr.dev/bounties/7336b71f-a36f-4ce7-a26d-c8335ac713d6 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2336 – Path Traversal in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2023-2336

Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21. • https://github.com/pimcore/pimcore/commit/498cadec2292f7842fb10612068ac78496e884b4 https://huntr.dev/bounties/af764624-7746-4f53-8480-85348dbb4f14 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2339 – Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2023-2339

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21. • https://github.com/pimcore/pimcore/commit/6946f8a5a0a93b516c49f17a5b45044eebd73480 https://huntr.dev/bounties/bb1537a5-fe7b-4c77-a582-10a82435fbc2 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-2343 – Cross-site Scripting (XSS) - DOM in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2023-2343

Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21. • https://github.com/pimcore/pimcore/commit/f1d904094700b513c4756904fa2b1e19d08d890e https://huntr.dev/bounties/2fa17227-a717-4b66-ab5a-16bffbb4edb2 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •