{"action":"Upgrade pimcore/admin-ui-classic-bundle to 1.3.4 or later.","affected":[{"fixed":"1.3.4","introduced":"0"}],"component":"pimcore/admin-ui-classic-bundle","cve_ids":["CVE-2024-25625"],"ecosystem":"Packagist","epss":0.00682,"exploited":false,"fixed_versions":["1.3.4"],"ghsa_id":"GHSA-3qpq-6w89-f7mx","id":"tcs_01M5KET7RVJWP8GNBNQWGXZFAS","modified_at":"2026-09-10T03:50:05.262765120Z","published_at":"2024-02-20T23:44:20Z","references":["https://osv.dev/vulnerability/GHSA-3qpq-6w89-f7mx","https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-3qpq-6w89-f7mx","https://nvd.nist.gov/vuln/detail/CVE-2024-25625","https://github.com/pimcore/admin-ui-classic-bundle/commit/b9fee9d383fc73dbd5e1d98dbb0ff3266d6b5a82","https://github.com/pimcore/admin-ui-classic-bundle"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-3qpq-6w89-f7mx","url":"https://osv.dev/vulnerability/GHSA-3qpq-6w89-f7mx"}],"summary":"Pimcore Host Header Injection in user invitation link"}