CVE-2024-21666
1 advisory.
Packagist/pimcore/customer-management-framework-bundle CVE-2024-21666: medium 6.5
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list
Action: Upgrade pimcore/customer-management-framework-bundle to 4.0.6 or later.
composer require pimcore/customer-management-framework-bundle:4.0.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.0.6 | - |
Fixed versions
| 4.0.6 |
Sources
- osv: GHSA-c38c-c8mh-vq68
- https://github.com/pimcore/customer-data-framework/security/advisories/GHSA-c38c-c8mh-vq68
- https://nvd.nist.gov/vuln/detail/CVE-2024-21666
- https://github.com/pimcore/customer-data-framework/commit/c33c0048390ef0cf98b801d46a81d0762243baa6
- https://github.com/pimcore/customer-data-framework
- https://github.com/pimcore/customer-data-framework/blob/b4af625ef327c58d05ef7cdf145fa749d2d4195e/src/Controller/Admin/DuplicatesController.php#L43
CVE-2024-21666 · published · modified · JSON