Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
NA

CVE-2023-28106

Published: 16/03/2023 Updated: 22/03/2023
CVSS v3 Base Score: 4.8 | Impact Score: 2.7 | Exploitability Score: 1.7
VMScore: 0
Subscribe to Pimcore

Vulnerability Summary

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.

Vulnerable Product Search on Vulmon Subscribe to Product

pimcore pimcore

References

CWE-79https://github.com/pimcore/pimcore/commit/c59d0bf1d03a5037b586fe06230694fa3818dbf2https://github.com/pimcore/pimcore/pull/14669.patchhttps://huntr.dev/bounties/fa77d780-9b23-404b-8c44-12108881d11ahttps://github.com/pimcore/pimcore/security/advisories/GHSA-x5j3-mq9g-8jc8https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook