Skip to content
OpenAdvisories
Medium · 6.3 CVE-2023-3574 EUVD-2023-2154GHSA-vx35-f379-4q49

Improper Authorization in pimcore/customer-data-framework

Published Jul 10, 2023 · Updated Oct 30, 2024 · Assigned by @huntrdev

Vendor: pimcore Product: Pimcore Customer Data Framework Package: pimcore/customer-management-framework-bundle Ecosystem: Packagist

Description

Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.

Affected products

VendorProductAffectedFixed
pimcore pimcore/customer-data-framework unspecified – < 3.4.1 3.4.1

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/customer-management-framework-bundle < 3.4.1 3.4.1 GHSA-vx35-f379-4q49

References