Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-4145 EUVD-2023-2229GHSA-735f-w79p-282x

Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

Published Aug 3, 2023 · Updated Oct 11, 2024 · Assigned by @huntrdev

Vendor: pimcore Product: Pimcore Customer Data Framework Package: pimcore/customer-management-framework-bundle Ecosystem: Packagist

Description

Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/customer-data-framework prior to 3.4.2.

Affected products

VendorProductAffectedFixed
pimcore pimcore/customer-data-framework unspecified – < 3.4.2 3.4.2

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist pimcore/customer-management-framework-bundle < 3.4.2 3.4.2 GHSA-735f-w79p-282x

References