Skip to content
OpenAdvisories
Medium · 6.7 CVE-2023-2881 EUVD-2023-1565GHSA-j65r-g7q2-f8v3

Storing Passwords in a Recoverable Format in pimcore/customer-data-framework

Published May 25, 2023 · Updated Jan 16, 2025 · Assigned by @huntrdev

Vendor: pimcore Product: Pimcore Customer Data Framework Package: pimcore/customer-management-framework-bundle Ecosystem: Packagist

Description

Storing Passwords in a Recoverable Format in GitHub repository pimcore/customer-data-framework prior to 3.3.10.

Affected products

VendorProductAffectedFixed
pimcore pimcore/customer-data-framework unspecified – < 3.3.10 3.3.10

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/customer-management-framework-bundle < 3.3.10 3.3.10 GHSA-j65r-g7q2-f8v3

References