Filtered by vendor Pimcore Subscriptions
Filtered by product Pimcore Subscriptions
Total 115 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-1704 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.20.
CVE-2023-1702 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.20.
CVE-2023-1578 1 Pimcore 1 Pimcore 2024-08-02 8.8 High
SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19.
CVE-2023-1517 1 Pimcore 1 Pimcore 2024-08-02 4.8 Medium
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.19.
CVE-2023-1515 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
CVE-2023-1429 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
CVE-2023-1312 1 Pimcore 1 Pimcore 2024-08-02 4.8 Medium
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19.
CVE-2023-1286 1 Pimcore 1 Pimcore 2024-08-02 4.8 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19.
CVE-2023-1116 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
CVE-2023-1117 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
CVE-2023-1067 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
CVE-2023-1115 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.18.
CVE-2023-0827 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17.
CVE-2023-0323 1 Pimcore 1 Pimcore 2024-08-02 5.4 Medium
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14.
CVE-2024-32871 1 Pimcore 1 Pimcore 2024-08-02 7.5 High
Pimcore is an Open Source Data & Experience Management Platform. The Pimcore thumbnail generation can be used to flood the server with large files. By changing the file extension or scaling factor of the requested thumbnail, attackers can create files that are much larger in file size than the original. This vulnerability is fixed in 11.2.4.