Beveiligingsadvies

CVE-2021-39166

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-09-01 14:00:11
Laatst bijgewerkt 2024-08-04 01:58:18
Toegewezen door GitHub_M
CVSS-score 8.0
Status PUBLISHED

Beschrijving

Pimcore is an open source data & experience management platform. Prior to version 10.1.2, text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticated users with access to the resources. This issue is patched in Pimcore version 10.1.2.