Pimcore Customer Management Framework vulnerabilities

• pimcore customer-data-framework, customer management framework +1 more Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts CVE-2024-21667 Fix available 6.5 MediumJanuary 10, 2024
• pimcore customer management framework, customer-data-framework +1 more Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list CVE-2024-21666 Fix available 6.5 MediumJanuary 10, 2024
• pimcore customer-data-framework, pimcore/customer-data-framework, customer management framework +2 more Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework CVE-2023-4145 Fix available 6.5 MediumAugust 3, 2023
• pimcore customer-data-framework, pimcore/customer-data-framework, customer management framework +2 more Improper Authorization in pimcore/customer-data-framework CVE-2023-3574 Fix available 6.3 MediumJuly 10, 2023
• pimcore pimcore/customer-data-framework, customer management framework +1 more Storing Passwords in a Recoverable Format in pimcore/customer-data-framework CVE-2023-2881 Fix available 6.7 MediumMay 25, 2023
• pimcore pimcore/customer-data-framework, customer management framework +1 more SQL Injection in pimcore/customer-data-framework CVE-2023-2756 Fix available 6.5 MediumMay 17, 2023
• pimcore customer management framework, customer-data-framework +1 more Pimcore vulnerable to Business Logic Errors in Customer automation rules CVE-2023-32075 Fix available 4.3 MediumMay 11, 2023
• pimcore pimcore/customer-data-framework, customer management framework +1 more Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework CVE-2023-2629 Fix available 5.0 MediumMay 10, 2023
• pimcore customer data framework, customer management framework +1 more Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection CVE-2021-31867 6.5 MediumAugust 4, 2021