pimcore/customer-management-framework-bundle vulnerabilities (Packagist)

9 vulnerabilities.

• pimcore/customer-management-framework-bundle Packagist Pimcore customer-data-framework list sql injection CVE-2024-11956 Public exploitFix available 5.1 MediumJanuary 28, 2025
• pimcore/customer-management-framework-bundle Packagist Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts CVE-2024-21667 Fix available 6.5 MediumJanuary 10, 2024
• pimcore/customer-management-framework-bundle Packagist Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list CVE-2024-21666 Fix available 6.5 MediumJanuary 10, 2024
• pimcore/customer-management-framework-bundle Packagist Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework CVE-2023-4145 Fix available 6.5 MediumAugust 3, 2023
• pimcore/customer-management-framework-bundle Packagist Improper Authorization in pimcore/customer-data-framework CVE-2023-3574 Fix available 6.3 MediumJuly 10, 2023
• pimcore/customer-management-framework-bundle Packagist Storing Passwords in a Recoverable Format in pimcore/customer-data-framework CVE-2023-2881 Fix available 6.7 MediumMay 25, 2023
• pimcore/customer-management-framework-bundle Packagist SQL Injection in pimcore/customer-data-framework CVE-2023-2756 Fix available 6.5 MediumMay 17, 2023
• pimcore/customer-management-framework-bundle Packagist Pimcore vulnerable to Business Logic Errors in Customer automation rules CVE-2023-32075 Fix available 4.3 MediumMay 11, 2023
• pimcore/customer-management-framework-bundle Packagist Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework CVE-2023-2629 Fix available 5.0 MediumMay 10, 2023