Security
فارسی
All products

pimcore/admin-ui-classic-bundle

Composer · Package
17 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Pimcore vulnerable to disclosure of system and database information behind /admin firewallCVE-2024-41109 · GHSA-FX6J-9PP6-PH36 pimcore/admin-ui-classic-bundle Composer Medium Fix reported
Host header injection in the password resetCVE-2024-23648 · GHSA-MRQG-MWH7-Q94J pimcore/admin-ui-classic-bundle Composer High Fix reported
Pimcore Host Header Injection in user invitation linkCVE-2024-25625 · GHSA-3QPQ-6W89-F7MX pimcore/admin-ui-classic-bundle Composer High Fix reported
Pimcore Admin Classic Bundle permissions are not getting checked when working with tagsCVE-2024-24822 · GHSA-3RFR-MPFJ-2JWQ pimcore/admin-ui-classic-bundle Composer Medium Fix reported
SQL Injection in Admin download files as zipCVE-2024-23646 · GHSA-CWX6-4WMF-C6XV pimcore/admin-ui-classic-bundle Composer High Fix reported
pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in TranslationsCVE-2023-42817 · GHSA-M988-7375-7G2C pimcore/admin-ui-classic-bundle Composer Medium Fix reported
Pimcore Admin Classic Bundle Vulnerable to SQL Injection in Translation Grid Date Filter via Unsanitized Property ParameterCVE-2026-44741 · GHSA-H4PH-CRVJ-9H92 pimcore/admin-ui-classic-bundle Composer High Fix reported
Pimcore's Admin Classic Bundle is Missing Function Level Authorization on "Predefined Properties" ListingCVE-2026-23495 · GHSA-HQRP-M84V-2M2F pimcore/admin-ui-classic-bundle Composer Medium Fix reported
pimcore/admin-ui-classic-bundle Unverified Password ChangeCVE-2023-5844 · GHSA-6F58-J323-6472 pimcore/admin-ui-classic-bundle Composer Medium Fix reported
Pimcore's Admin Classic Bundle allows HTML InjectionCVE-2025-30166 · GHSA-X82R-6J37-VRGG pimcore/admin-ui-classic-bundle Composer Low Fix reported
Pimcore Admin Classic Bundle allows user enumerationCVE-2025-24980 · GHSA-VR5F-PHP7-RG24 pimcore/admin-ui-classic-bundle Composer Medium Fix reported
Pimcore includes vulnerable PHPOffice/PhpSpreadsheetGHSA-HQ76-662X-7MW4 pimcore/admin-ui-classic-bundlepimcore/data-importer Composer High Fix reported
Vulnerable embedded jQuery VersionGHSA-JMH9-6RJQ-GJH9 pimcore/admin-ui-classic-bundle Composer Medium Fix reported
Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup pageCVE-2023-37280 · GHSA-HQV9-6JQW-9G8M pimcore/admin-ui-classic-bundle Composer Medium Fix reported
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export documentCVE-2023-47636 · GHSA-C8HJ-W239-5GVF pimcore/admin-ui-classic-bundle Composer Medium Fix reported
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previewsCVE-2023-46722 · GHSA-JFXW-6C5V-C42F pimcore/admin-ui-classic-bundle Composer Medium Fix reported
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewallsCVE-2023-49075 · GHSA-9WWG-R3C7-4VFG pimcore/admin-ui-classic-bundle Composer High Fix reported