Pimcore Customer Data Framework

6 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-4145

  Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

  Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  Aug 3, 2023
• Medium 6.3
  CVE-2023-3574

  Improper Authorization in pimcore/customer-data-framework

  Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  Jul 10, 2023
• Medium 6.7
  CVE-2023-2881

  Storing Passwords in a Recoverable Format in pimcore/customer-data-framework

  Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  May 25, 2023
• Medium 6.5
  CVE-2023-2756

  SQL Injection in pimcore/customer-data-framework

  SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  May 17, 2023
• Medium 5.0
  CVE-2023-2629

  Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework

  Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.

  pimcore Pimcore Customer Data Framework pimcore/customer-management-framework-bundle Packagist
  May 10, 2023
• Medium 6.5
  CVE-2021-31867

  Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection

  Pimcore Customer Data Framework version 3.0.0 and earlier suffers from a Boolean-based blind SQL injection issue in the $id parameter of the SegmentAssignmentController.php component of the application. This issue was fixed in version 3.0.2 of the product.

  pimcore Pimcore Customer Data Framework
  Aug 4, 2021