CVE-2019-18982

2019-11-1505:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

bundles/AdminBundle/Controller/Admin/EmailController.php in Pimcore before 6.3.0 allows script execution in the Email Log preview window because of the lack of a Content-Security-Policy header.

CPENameOperatorVersion
pimcoreeq6.0.4
pimcoreeq6.2.1
pimcoreeq6.1.1
pimcoreeq6.2.0
pimcoreeq6.0.3
pimcoreeq6.0.2
pimcoreeq6.0.0
pimcoreeq6.2.3
pimcoreeq6.0.5
pimcoreeq6.0.1