Beveiligingsadvies

CVE-2024-24822

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-02-07 17:17:58
Laatst bijgewerkt 2024-11-07 20:22:08
Toegewezen door GitHub_M
CVSS-score 6.5
Status PUBLISHED

Beschrijving

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to do so. A fix is available in version 1.3.3. As a workaround, one may apply the patch manually.