CVE-2024-11956
1 advisory.
Packagist/pimcore/customer-management-framework-bundle CVE-2024-11956: high 7.2, EPSS 0.86%
pimcore/customer-data-framework vulnerable to SQL Injection
Action: Upgrade pimcore/customer-management-framework-bundle to 4.2.1 or later.
composer require pimcore/customer-management-framework-bundle:4.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.1 | - |
Fixed versions
| 4.2.1 |
Sources
- osv: GHSA-q53r-9hh9-w277
- https://github.com/pimcore/pimcore/security/advisories/GHSA-q53r-9hh9-w277
- https://nvd.nist.gov/vuln/detail/CVE-2024-11956
- https://github.com/pimcore/customer-data-framework/releases/tag/v4.2.1
- https://github.com/pimcore/pimcore
- https://vuldb.com/?ctiid.293906
- https://vuldb.com/?id.293906
- https://vuldb.com/?submit.451863
CVE-2024-11956 · published · modified · JSON