Packagist/pimcore/pimcore CVE-2023-25240: high 8.8, EPSS 0.98%

SameSite Attribute vulnerability in pimCore

Action: Upgrade pimcore/pimcore to 10.5.16 or later.

composer require pimcore/pimcore:10.5.16

Affected

Fixed versions

Sources

• osv: GHSA-r2vq-p658-p274
• https://nvd.nist.gov/vuln/detail/CVE-2023-25240
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pimcore/pimCore-10.5.15
• https://github.com/pimcore/pimcore
• https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions

CVE-2023-25240 · published 2023-02-13T21:31:03Z · modified 2025-03-21T21:15:40.707092Z · JSON