PI
Product
pimcore/customer-data-framework
5
CVEs
0
On KEV
7.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 3Low 0
Watch
Add pimcore/customer-data-framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-2629 | 7.8 | May 10 | Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework Affected: before 3.3.9 |
| CVE-2023-2756 | 7.2 | May 17 | SQL Injection in pimcore/customer-data-framework Affected: before 3.3.10 |
| CVE-2023-3574 | 6.5 | Jul 10 | Improper Authorization in pimcore/customer-data-framework Affected: before 3.4.1 |
| CVE-2023-4145 | 5.4 | Aug 3 | Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework Affected: before 3.4.2 |
| CVE-2023-2881 | 4.9 | May 25 | Storing Passwords in a Recoverable Format in pimcore/customer-data-framework Affected: before 3.3.10 |
Showing 5