GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
GitHub reviewed advisories
Unreviewed advisories
9 advisories
Cross-site Scripting (XSS) in Website Settings name field
Moderate
CVE-2023-2342
was published
for
pimcore/pimcore
(Composer)
Apr 27, 2023
Cross-site Scripting (XSS) in DataObject Classification Store
Moderate
CVE-2023-2343
was published
for
pimcore/pimcore
(Composer)
Apr 27, 2023
Pimcore vulnerable to Business Logic Errors via Customer automation rules
Moderate
CVE-2023-32075
was published
for
pimcore/customer-management-framework-bundle
(Composer)
May 11, 2023
Cross-site Scripting (XSS) in pimcore via DataObject Class date fields
Moderate
CVE-2023-2327
was published
for
pimcore/pimcore
(Composer)
Apr 27, 2023
Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition
Moderate
CVE-2023-2328
was published
for
pimcore/pimcore
(Composer)
Apr 27, 2023
Reflected XSS in Application Logger module
Moderate
GHSA-2xpm-cmvw-3jcc
was published
for
pimcore/pimcore
(Composer)
Mar 16, 2023
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
Moderate
CVE-2023-1517
was published
for
pimcore/pimcore
(Composer)
Mar 20, 2023
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Moderate
CVE-2023-1515
was published
for
pimcore/pimcore
(Composer)
Mar 20, 2023
Cross-site Scripting (XSS) in Document Types
Moderate
CVE-2023-1429
was published
for
pimcore/pimcore
(Composer)
Mar 16, 2023
ProTip!
Advisories are also available from the
GraphQL API