pimcore/customer-data-framework Security Advisories | GitStock

medium2024-01-10

Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts

GHSA-g273-wppx-82w4 · CVE-2024-21667

medium2024-01-10

Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list

GHSA-c38c-c8mh-vq68 · CVE-2024-21666

medium2023-08-03

pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name

GHSA-735f-w79p-282x · CVE-2023-4145

medium2023-07-10

Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller

GHSA-vx35-f379-4q49 · CVE-2023-3574

medium2023-05-25

Pimcore customers' list user password hash is disclosed

GHSA-j65r-g7q2-f8v3 · CVE-2023-2881

high2023-05-17

pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query

GHSA-25fx-3c2q-cq46 · CVE-2023-2756

high2023-05-11

Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection

GHSA-mq3x-qgwx-3rfw · CVE-2023-2629

medium2023-05-11

Pimcore vulnerable to Business Logic Errors via Customer automation rules

GHSA-x99j-r8vv-gwwj · CVE-2023-32075