pimcore/studio-backend-bundle
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation | pimcore/studio-backend-bundle | Composer | High | Fix reported | |
| Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes | pimcore/studio-backend-bundle | Composer | High | Fix reported | |
| Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass | pimcore/studio-backend-bundle | Composer | High | Fix reported |