Skip to content
OpenAdvisories

Archive

4 April 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8
    CVE-2019-10867 Public exploit EPSS 71%

    Pimcore Unserialize Remote Code Execution

    An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to bu…