Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

pimcore/customer-management-framework-bundle

9 known vulnerabilities (9 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
9 · 9 medium
Registry
Packagist

Advisories 9

  • CVE-2024-11956Medium 5.1

    Pimcore customer-data-framework list sql injection

    Affected: fixed in 4.2.1.

  • CVE-2024-21667Medium 6.5

    Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts

    Affected: fixed in 4.0.6.

  • CVE-2024-21666Medium 6.5

    Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list

    Affected: fixed in 4.0.6.

  • CVE-2023-4145Medium 6.5

    Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework

    Affected: fixed in 3.4.2.

  • CVE-2023-3574Medium 6.3

    Improper Authorization in pimcore/customer-data-framework

    Affected: fixed in 3.4.1.

  • CVE-2023-2881Medium 6.7

    Storing Passwords in a Recoverable Format in pimcore/customer-data-framework

    Affected: fixed in 3.3.10.

  • CVE-2023-2756Medium 6.5

    SQL Injection in pimcore/customer-data-framework

    Affected: fixed in 3.3.10.

  • CVE-2023-32075Medium 4.3

    Pimcore vulnerable to Business Logic Errors in Customer automation rules

    Affected: fixed in 3.3.9.

  • CVE-2023-2629Medium 5.0

    Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework

    Affected: fixed in 3.3.9.