{"action":"Upgrade pimcore/pimcore to 11.5.17 or later.","affected":[{"fixed":"12.3.6","introduced":"12.0.0-RC1"},{"fixed":"11.5.17","introduced":"0"},{"fixed":"2026.1.2","introduced":"2026.1.0"}],"component":"pimcore/pimcore","cve_ids":["CVE-2026-45704"],"ecosystem":"Packagist","epss":0.00427,"exploited":false,"fixed_versions":["12.3.6","11.5.17","2026.1.2"],"ghsa_id":"GHSA-jwcc-gv4m-93x6","id":"tcs_01M5KF4YBRTDD08DAB8JS0QZ28","modified_at":"2026-07-10T19:15:11.859491009Z","published_at":"2026-05-27T22:34:01Z","references":["https://osv.dev/vulnerability/GHSA-jwcc-gv4m-93x6","https://github.com/pimcore/pimcore/security/advisories/GHSA-jwcc-gv4m-93x6","https://github.com/pimcore/pimcore/pull/19099","https://github.com/pimcore/pimcore/commit/1893ff1cd116e442b995ddf17e8c6e0aa372268e","https://github.com/pimcore/pimcore","https://github.com/pimcore/pimcore/releases/tag/v12.3.6"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-jwcc-gv4m-93x6","url":"https://osv.dev/vulnerability/GHSA-jwcc-gv4m-93x6"}],"summary":"Pimcore has a CustomReports Share Bypass"}