Withdrawn Advisory: Pimcore vulnerable to Cross-site Scripting

2023-03-0712:30:17

CWE-79

GitHub Advisory Database

github.com

withdrawn

pimcore

cross-site scripting

github

security issue

advisory

JSON

Withdrawn Advisory

This advisory has been withdrawn because the maintainers no longer consider this to be a security issue. This link is maintained to preserve external references.

Original Description

Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 11.0.0.

Affected configurations

Vulners

Node

pimcorepimcoreRange<11.0.0

VendorProductVersionCPE
pimcorepimcore*cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
pimcore	pimcore	*	cpe:2.3:a:pimcore:pimcore::::::::

References

github.com/advisories/GHSA-8wg7-88cg-7p9j

github.com/pimcore/pimcore/commit/da2af2d413b144b9a742118124457d13232d31fd

huntr.dev/bounties/04447124-c7d4-477f-8364-91fe5b59cda0

nvd.nist.gov/vuln/detail/CVE-2023-1247

JSON

Related for GHSA-8WG7-88CG-7P9J