PT-2023-20000 · Pimcore · Pimcore
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
pimCore version 10.5.15
Description
The issue is related to an improper SameSite Attribute, which allows attackers to execute arbitrary code.
Recommendations
For pimCore version 10.5.15, update to a version that fixes the improper SameSite Attribute issue to prevent arbitrary code execution.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Pimcore