Packagist/pimcore/pimcore CVE-2023-0827: medium 6.3, EPSS 3.02%
Cross-site Scripting in pimcore
Action: Upgrade pimcore/pimcore to 1.5.17 or later.
composer require pimcore/pimcore:1.5.17Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.17 | - |
Fixed versions
| 1.5.17 |
Sources
- osv: GHSA-3w96-p6vh-c298
- https://nvd.nist.gov/vuln/detail/CVE-2023-0827
- https://github.com/pimcore/pimcore/commit/f4050586136cb4c44e3d6042111a1b87b340df95
- https://github.com/pimcore/pimcore
- https://huntr.dev/bounties/75bc7d07-46a7-4ed9-a405-af4fc47fb422
CVE-2023-0827 · published · modified · JSON