CVE-2023-3574

Packagist/pimcore/customer-management-framework-bundle CVE-2023-3574: medium 6.5

Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller

Action: Upgrade pimcore/customer-management-framework-bundle to 3.4.1 or later.

composer require pimcore/customer-management-framework-bundle:3.4.1

Affected

Fixed versions

Sources

• osv: GHSA-vx35-f379-4q49
• https://github.com/pimcore/customer-data-framework/security/advisories/GHSA-vx35-f379-4q49
• https://nvd.nist.gov/vuln/detail/CVE-2023-3574
• https://github.com/pimcore/customer-data-framework/commit/f15668c86db254e86ba7ac895bc3cdd1a2a3cc45
• https://github.com/pimcore/customer-data-framework/commit/f15668c86db254e86ba7ac895bc3cdd1a2a3cc45.patch
• https://github.com/pimcore/customer-data-framework
• https://huntr.dev/bounties/1dcb4f01-e668-4aa3-a6a3-838532e500c6

CVE-2023-3574 · published 2023-07-10T21:53:52Z · modified 2026-09-10T03:49:54.673114267Z · JSON