pimcore/studio-backend-bundle vulnerabilities (Packagist)
3 vulnerabilities.
-
pimcore/studio-backend-bundlePackagist Pimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass 8.8 High -
pimcore/studio-backend-bundlePackagist Pimcore: SQL Injection via Column Name in DateFilter allows authenticated user to extract arbitrary database data including admin password hashes 7.7 High -
pimcore/studio-backend-bundlePackagist Pimcore: Insufficient Permission Check on Class Definition Creation Endpoint Allows Privilege Escalation 7.1 High