Page 9 of 101 results (0.006 seconds)

CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0260 – Cross-site Scripting (XSS) - Stored in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2022-0260

18 Jan 2022 — Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.2.7. Una vulnerabilidad de tipo Cross-site Scripting (XSS) - Almacenado en el repositorio de GitHub pimcore/pimcore versiones anteriores a 10.2.7 • https://github.com/pimcore/pimcore/commit/3125d5f0c04cfb5835857ca9416f0bb143130a2f • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0257 – Cross-site Scripting (XSS) - Stored in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2022-0257

17 Jan 2022 — pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pimcore es vulnerable a una Neutralización Inapropiada de la Entrada Durante la Generación de la Página Web ("Cross-site Scripting") • https://github.com/pimcore/pimcore/commit/dfaf78b26fb77990267c0cc05b9fcb9f8de7b66d • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0258 – SQL Injection in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2022-0258

17 Jan 2022 — pimcore is vulnerable to Improper Neutralization of Special Elements used in an SQL Command pimcore es vulnerable a una Neutralización Inapropiada de Elementos Especiales usados en un Comando SQL • https://github.com/pimcore/pimcore/commit/66281c12479dc01a06258d8533eaddfb1770d5bd • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-0256 – Cross-site Scripting (XSS) - Stored in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2022-0256

17 Jan 2022 — pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pimcore es vulnerable a una Neutralización Inapropiada de la Entrada Durante la Generación de la Página Web ("Cross-site Scripting") • https://github.com/pimcore/pimcore/commit/dff1cb0c466abcd55f1268934de3ed937b7436a7 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-4139 – Cross-site Scripting (XSS) - Stored in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2021-4139

21 Dec 2021 — pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pimcore es vulnerable a una Neutralización Inapropiada de Entradas Durante la Generación de Páginas Web ("Cross-site Scripting") • https://github.com/pimcore/pimcore/commit/d5c3e876d910784000335061c3bd24d301351245 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-4084 – Cross-site Scripting (XSS) - Stored in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2021-4084

10 Dec 2021 — pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pimcore es vulnerable a una Neutralización Inadecuada de Entradas Durante la Generación de Páginas Web ("Cross-site Scripting") • https://github.com/pimcore/pimcore/commit/3c2a14e676a57e5d77a16255965988eef48f9065 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-4081 – Cross-site Scripting (XSS) - Reflected in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2021-4081

10 Dec 2021 — pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pimcore es vulnerable a una Neutralización Inadecuada de Entradas Durante la Generación de Páginas Web ("Cross-site Scripting") • https://github.com/pimcore/pimcore/commit/34ed0e050ff679b4b38414aef48ea1ff956f907a • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-4082 – Cross-Site Request Forgery (CSRF) in pimcore/pimcore

https://notcve.org/view.php?id=CVE-2021-4082

10 Dec 2021 — pimcore is vulnerable to Cross-Site Request Forgery (CSRF) pimcore es vulnerable a un ataque de tipo Cross-Site Request Forgery (CSRF) • https://github.com/pimcore/pimcore/commit/3088cec7dc3cbc5a8b26f1269e398e799ee7ee28 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2021-39189 – Observable Response Discrepancy in Lost Password Service

https://notcve.org/view.php?id=CVE-2021-39189

15 Sep 2021 — Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually. Pimcore es una plataforma de administración de datos y experiencias de código abierto. • https://github.com/pimcore/pimcore/pull/10223.patch • CWE-203: Observable Discrepancy CWE-204: Observable Response Discrepancy •

CVSS: 8.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-39170 – Improper Encoding or Escaping of Output in Asset Metadata Component

https://notcve.org/view.php?id=CVE-2021-39170

01 Sep 2021 — Pimcore is an open source data & experience management platform. Prior to version 10.1.2, an authenticated user could add XSS code as a value of custom metadata on assets. There is a patch for this issue in Pimcore version 10.1.2. As a workaround, users may apply the patch manually. Pimcore es una plataforma de administración de datos y experiencias de código abierto. • https://github.com/pimcore/pimcore/pull/10178 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-116: Improper Encoding or Escaping of Output •