Security
فارسی
All products

pimcore/customer-management-framework-bundle

Composer · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
pimcore/customer-data-framework vulnerable to SQL InjectionCVE-2024-11956 · GHSA-Q53R-9HH9-W277 pimcore/customer-management-framework-bundle Composer Medium Fix reported
Pimcore vulnerable to Business Logic Errors via Customer automation rulesCVE-2023-32075 · GHSA-X99J-R8VV-GWWJ pimcore/customer-management-framework-bundle Composer Medium Fix reported
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment queryCVE-2023-2756 · GHSA-25FX-3C2Q-CQ46 pimcore/customer-management-framework-bundle Composer High Fix reported
Embedding untrusted input inside CSV files leads to Formula Injection/CSV InjectionCVE-2023-2629 · GHSA-MQ3X-QGWX-3RFW pimcore/customer-management-framework-bundle Composer High Fix reported
Pimcore customers' list user password hash is disclosedCVE-2023-2881 · GHSA-J65R-G7Q2-F8V3 pimcore/customer-management-framework-bundle Composer Medium Fix reported
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extractsCVE-2024-21667 · GHSA-G273-WPPX-82W4 pimcore/customer-management-framework-bundle Composer Medium Fix reported
pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment nameCVE-2023-4145 · GHSA-735F-W79P-282X pimcore/customer-management-framework-bundle Composer Medium Fix reported
Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules ControllerCVE-2023-3574 · GHSA-VX35-F379-4Q49 pimcore/customer-management-framework-bundle Composer Medium Fix reported
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates listCVE-2024-21666 · GHSA-C38C-C8MH-VQ68 pimcore/customer-management-framework-bundle Composer Medium Fix reported