PI
Product
pimcore/customer-data-framework
6
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add pimcore/customer-data-framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2629 | 7.8 | May 10 | Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework Affected: before 3.3.9 |
| CVE-2021-31867 | 7.5 | Aug 4 | Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection Affected: 3.0.0 through 3.0.0 |
| CVE-2023-2756 | 7.2 | May 17 | SQL Injection in pimcore/customer-data-framework Affected: before 3.3.10 |
| CVE-2023-3574 | 6.5 | Jul 10 | Improper Authorization in pimcore/customer-data-framework Affected: before 3.4.1 |
| CVE-2023-4145 | 5.4 | Aug 3 | Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework Affected: before 3.4.2 |
| CVE-2023-2881 | 4.9 | May 25 | Storing Passwords in a Recoverable Format in pimcore/customer-data-framework Affected: before 3.3.10 |
Showing 6