CVE-2022-2796
1 advisory.
Packagist/pimcore/pimcore CVE-2022-2796: medium 6.7
Pimcore Cross-site Scripting (XSS)
Action: Upgrade pimcore/pimcore to 10.5.4 or later.
composer require pimcore/pimcore:10.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.5.4 | - |
Fixed versions
| 10.5.4 |
Sources
- osv: GHSA-pr4f-4pcx-2r3h
- https://nvd.nist.gov/vuln/detail/CVE-2022-2796
- https://github.com/pimcore/pimcore/commit/2fd46859c1def6b5ab79ae2b9cb88c309769443d
- https://github.com/pimcore/pimcore
- https://huntr.dev/bounties/69d56ec3-8370-44cf-9732-4065e3076097
CVE-2022-2796 · published · modified · JSON