pimcore/customer-management-framework-bundle

9 results · Feed

• Medium 4.7
  CVE-2024-11956 Public exploit

  Pimcore customer-data-framework list sql injection

  A vulnerability, which was classified as critical, has been found in Pimcore customer-data-framework up to 4.2.0. Affected by this issue is some unknown functionality of the file /admin/customermanagementframework/customers/list. The manipulation of the argum…

  pimcore customer-data-framework pimcore/customer-management-framework-bundle Packagist
  Jan 28, 2025
• Medium 6.5
  CVE-2024-21667

  Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts

  pimcore/customer-data-framework is the Customer Management Framework for management of customer data within Pimcore. An authenticated and unauthorized user can access the GDPR data extraction feature and query over the information returned, leading to custome…

  pimcore customer-data-framework pimcore/customer-management-framework-bundle Packagist
  Jan 11, 2024
• Medium 6.5
  CVE-2024-21666

  Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list

  The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management, segmentation, personalization and marketing automation. An authenticated and unauthorized user can access the list of potential duplicate users and see their …

  pimcore customer-data-framework pimcore/customer-management-framework-bundle Packagist
  Jan 11, 2024
• Medium 6.5
  CVE-2023-4145

  Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  Aug 3, 2023
• Medium 6.3
  CVE-2023-3574

  Improper Authorization in pimcore/customer-data-framework

  Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  Jul 10, 2023
• Medium 6.7
  CVE-2023-2881

  Storing Passwords in a Recoverable Format in pimcore/customer-data-framework

  Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  May 25, 2023
• Medium 6.5
  CVE-2023-2756

  SQL Injection in pimcore/customer-data-framework

  SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  May 17, 2023
• Medium 4.3
  CVE-2023-32075

  Pimcore vulnerable to Business Logic Errors in Customer automation rules

  The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/customer-management-framework-bundle` prior to version 3.3.9, business logic errors are possible in the `Conditions` tab since the counter can be …

  pimcore customer-data-framework pimcore/customer-management-framework-bundle Packagist
  May 11, 2023
• Medium 5.0
  CVE-2023-2629

  Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework

  Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  May 10, 2023