CVE-2021-39189
1 advisory.
Packagist/pimcore/pimcore CVE-2021-39189: medium 5.3, EPSS 1.37%
Observable Response Discrepancy in Lost Password Service
Action: Upgrade pimcore/pimcore to 10.1.3 or later.
composer require pimcore/pimcore:10.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.1.3 | - |
Fixed versions
| 10.1.3 |
Sources
- osv: GHSA-579x-cjvr-cqj9
- https://github.com/pimcore/pimcore/security/advisories/GHSA-579x-cjvr-cqj9
- https://nvd.nist.gov/vuln/detail/CVE-2021-39189
- https://github.com/pimcore/pimcore/pull/10223.patch
- https://github.com/pimcore/pimcore/pull/10223/commits/d0a4de39cf05dce6af71f8ca039132bdfcbb0dce
- https://github.com/pimcore/pimcore
- https://huntr.dev/bounties/12462a99-ebf8-4e39-80b3-54a16caa3f4c
CVE-2021-39189 · published · modified · JSON