Pimcore Customer-data-framework vulnerabilities

• pimcore customer-data-framework, pimcore +1 more Pimcore customer-data-framework list sql injection CVE-2024-11956 Public exploitFix available 5.1 MediumJanuary 28, 2025
• pimcore customer-data-framework, customer management framework +1 more Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts CVE-2024-21667 Fix available 6.5 MediumJanuary 10, 2024
• pimcore customer management framework, customer-data-framework +1 more Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list CVE-2024-21666 Fix available 6.5 MediumJanuary 10, 2024
• pimcore customer-data-framework, pimcore +1 more Pimcore missing token/header to prevent CSRF CVE-2023-49076 4.3 MediumNovember 30, 2023
• pimcore customer-data-framework, pimcore/customer-data-framework, customer management framework +2 more Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework CVE-2023-4145 Fix available 6.5 MediumAugust 3, 2023
• pimcore customer-data-framework, pimcore/customer-data-framework, customer management framework +2 more Improper Authorization in pimcore/customer-data-framework CVE-2023-3574 Fix available 6.3 MediumJuly 10, 2023
• pimcore pimcore/customer-data-framework, customer management framework +1 more Storing Passwords in a Recoverable Format in pimcore/customer-data-framework CVE-2023-2881 Fix available 6.7 MediumMay 25, 2023
• pimcore pimcore/customer-data-framework, customer management framework +1 more SQL Injection in pimcore/customer-data-framework CVE-2023-2756 Fix available 6.5 MediumMay 17, 2023
• pimcore customer management framework, customer-data-framework +1 more Pimcore vulnerable to Business Logic Errors in Customer automation rules CVE-2023-32075 Fix available 4.3 MediumMay 11, 2023
• pimcore pimcore/customer-data-framework, customer management framework +1 more Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework CVE-2023-2629 Fix available 5.0 MediumMay 10, 2023