CVE-2022-0894

Packagist/pimcore/pimcore CVE-2022-0894: medium 5.4

Cross-site Scripting in Pimcore

Action: Upgrade pimcore/pimcore to 10.4.0 or later.

composer require pimcore/pimcore:10.4.0

Affected

Fixed versions

Sources

• osv: GHSA-22hc-47cc-7x6f
• https://nvd.nist.gov/vuln/detail/CVE-2022-0894
• https://github.com/pimcore/pimcore/pull/11447
• https://github.com/pimcore/pimcore/commit/6e0922c5b2959ac1b48500ac508d8fc5a97286f9
• https://github.com/pimcore/pimcore
• https://huntr.dev/bounties/18f8e85e-3cbf-4915-b649-8cffe99daa95

CVE-2022-0894 · published 2022-03-16T00:00:48Z · modified 2023-11-08T04:07:41.882004Z · JSON