Packagist/pimcore/customer-management-framework-bundle CVE-2023-4145: medium 6.5, EPSS 0.61%

pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name

Action: Upgrade pimcore/customer-management-framework-bundle to 3.4.2 or later.

composer require pimcore/customer-management-framework-bundle:3.4.2

Affected

Fixed versions

Sources

• osv: GHSA-735f-w79p-282x
• https://github.com/pimcore/customer-data-framework/security/advisories/GHSA-735f-w79p-282x
• https://nvd.nist.gov/vuln/detail/CVE-2023-4145
• https://github.com/pimcore/customer-data-framework/commit/72f45dd537a706954e7a71c99fbe318640e846a2
• https://github.com/pimcore/customer-data-framework/commit/72f45dd537a706954e7a71c99fbe318640e846a2.patch
• https://github.com/pimcore/customer-data-framework
• https://huntr.dev/bounties/ce852777-2994-40b4-bb4e-c4d10023eeb0

CVE-2023-4145 · published 2023-08-03T16:32:49Z · modified 2026-09-10T03:49:57.639250027Z · JSON