CVE-2023-3574

2023-07-1016:15:56

CWE-285

[email protected]

web.nvd.nist.gov

cve

github repository

pimcore

customer data framework

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

20.9%

JSON

Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.

Affected configurations

NVD

Node

pimcorecustomer_management_frameworkRange<3.4.1pimcore

CPENameOperatorVersion
pimcore:customer_management_frameworkpimcore customer management frameworklt3.4.1

CPE	Name	Operator	Version
pimcore:customer_management_framework	pimcore customer management framework	lt	3.4.1

CNA Affected

[
  {
    "vendor": "pimcore",
    "product": "pimcore/customer-data-framework",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "3.4.1",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]