Skip to content
OpenAdvisories

Package · Packagist

pimcore/ecommerce-framework-bundle

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 4.3
    CVE-2024-21665

    Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list

    ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Access control and permissions are not being enforced. This…

    pimcore ecommerce-framework-bundle pimcore/ecommerce-framework-bundle Packagist