Lucene search
K

CVE-2021-23340

šŸ—“ļøĀ 18 Feb 2021Ā 14:25:14Reported byĀ snykTypeĀ 
cve
Ā cve
šŸ”—Ā web.nvd.nist.govšŸ“°ļøĀ 2Ā Media mentionsšŸ‘Ā 82Ā Views🌐 WEB

Affects pimcore/pimcore before 6.8.8, local file inclusion vulnerability in CustomReportController clas

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
Circl
CVE-2021-23340
18 Feb 202118:50
–circl
CNNVD
Pimcore č·Æå¾„éåŽ†ę¼ę“ž
18 Feb 202100:00
–cnnvd
CNVD
Pimcore Local File Inclusion Vulnerability
17 Mar 202100:00
–cnvd
Cvelist
CVE-2021-23340 Local File Inclusion
18 Feb 202114:25
–cvelist
EUVD
EUVD-2021-0554
7 Oct 202500:30
–euvd
Github Security Blog
Path traversal in pimcore/pimcore
25 Feb 202116:32
–github
NVD
CVE-2021-23340
18 Feb 202115:15
–nvd
OSV
GHSA-H7F9-CVH5-QW7F Path traversal in pimcore/pimcore
25 Feb 202116:32
–osv
Prion
Arbitrary file deletion
18 Feb 202115:15
–prion
Snyk
Local File Inclusion
18 Feb 202110:47
–snyk
Rows per page
NVD
Node
pimcorepimcoreRange<6.8.8
[
  {
    "product": "pimcore/pimcore",
    "vendor": "n/a",
    "versions": [
      {
        "lessThan": "6.8.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]
ParameterPositionPathDescriptionCWE
exportFilequery paramadmin/reports/custom-report/download-csvLocal File Inclusion in downloadCsvAction due to unsanitized exportFile parameterCWE-22

Data

Build on a solid foundation withĀ Vulners data

WeĀ provide theĀ essential building blocks forĀ cybersecurity solutions withĀ comprehensive, structured, andĀ constantly updated vulnerability andĀ exploits data

Api

Power your application withĀ Vulners API

The Vulners REST API offers reliable, high-performance access toĀ vulnerabilityĀ intelligence, withĀ 99.9%Ā SLAĀ uptime andĀ CDN-backed data delivery forĀ seamlessĀ global access

App

Assess and manage vulnerabilities withĀ VulnersĀ tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 05:51Current
6.7Medium risk
Vulners AI Score6.7
CVSS 25.5
CVSS 3.17.1
EPSS0.00023
82