CVE-2021-23340
1 advisory.
Packagist/pimcore/pimcore CVE-2021-23340: high 7.1, EPSS 1.32%
Path traversal in pimcore/pimcore
Action: Upgrade pimcore/pimcore to 6.8.8 or later.
composer require pimcore/pimcore:6.8.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.8.8 | - |
Fixed versions
| 6.8.8 |
Sources
- osv: GHSA-h7f9-cvh5-qw7f
- https://nvd.nist.gov/vuln/detail/CVE-2021-23340
- https://github.com/pimcore/pimcore/commit/1786bdd4962ee51544fad537352c2b4223309442
- https://github.com/pimcore/pimcore/blob/v6.7.2/bundles/AdminBundle/Controller/Reports/CustomReportController.php%23L454
- https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1070132
CVE-2021-23340 · published · modified · JSON