pimcore is vulnerable to Cross-Site Request Forgery (CSRF)

🗓️ 16 Dec 2021 14:10:28Reported by GitHub Advisory DatabaseType

pimcore vulnerability to CSR

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 9
osv	CVE-2021-4082	10 Dec 202111:15	–	osv
osv	pimcore is vulnerable to Cross-Site Request Forgery (CSRF)	16 Dec 202114:28	–	osv
veracode	Cross-Site Request Forgery (CSRF)	13 Dec 202103:18	–	veracode
cvelist	CVE-2021-4082 Cross-Site Request Forgery (CSRF) in pimcore/pimcore	10 Dec 202110:20	–	cvelist
cnvd	pimcore Cross-site Request Forgery Vulnerability (CNVD-2022-07505)	16 Dec 202100:00	–	cnvd
huntr	Cross-Site Request Forgery (CSRF) in pimcore/pimcore	7 Dec 202104:26	–	huntr
nvd	CVE-2021-4082	10 Dec 202111:15	–	nvd
prion	Cross site request forgery (csrf)	10 Dec 202111:15	–	prion
cve	CVE-2021-4082	10 Dec 202111:15	–	cve

Vulners

Node

pimcore pimcoreRange<10.2.6

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-4082
github	www.github.com/pimcore/pimcore/commit/3088cec7dc3cbc5a8b26f1269e398e799ee7ee28
huntr	www.huntr.dev/bounties/81838575-e170-41fb-b451-92c1c8aab092
github	www.github.com/advisories/GHSA-2v2v-fx7r-f2fh

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

16 Dec 2021 14:28Current

3.7Low risk

Vulners AI Score3.7

CVSS24.3

CVSS34.3

EPSS0.00005

CWE-352