Lucene search
HistorySep 27, 2023 - 3:19 p.m.
CVE-2023-5192
cve-2023-5192
excessive data query
large data table
github
repository
nvd
security vulnerability
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
0.0005 Low
EPSS
Percentile
16.8%
Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0.
Affected configurations
Node
pimcorecoreRange<10.3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| pimcore:core | pimcore core | lt | 10.3.0 |
CNA Affected
[
{
"vendor": "pimcore",
"product": "pimcore/demo",
"versions": [
{
"version": "unspecified",
"lessThan": "10.3.0",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
huntr
huntr
Instropection query is enabled on demo.pimcore.fun
2023-03-11 20:23:05
osv
osv
Pimcore Demo Allows GraphQL Introspection
2023-09-27 15:30:40
CVE-2023-5192
2023-09-27 15:19:42
nvd
nvd
CVE-2023-5192
2023-09-27 15:19:42
prion
prion
Code injection
2023-09-27 15:19:00
github
github
Pimcore Demo Allows GraphQL Introspection
2023-09-27 15:30:40
cvelist
cvelist
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L
0.0005 Low
EPSS
Percentile
16.8%
Related for CVE-2023-5192