CVE-2024-24822

2024-02-0718:15:54

Google

osv.dev

pimcore

admin classic bundle

vulnerability

unauthorized manipulation

tag

patch

0.001 Low

EPSS

Percentile

24.7%

JSON

Pimcore’s Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to do so. A fix is available in version 1.3.3. As a workaround, one may apply the patch manually.

CPENameOperatorVersion
admin-ui-classic-bundleeq1.2.0
admin-ui-classic-bundleeq1.2.1
admin-ui-classic-bundleeq1.3.1
admin-ui-classic-bundleeq1.1.2
admin-ui-classic-bundleeq1.1.1
admin-ui-classic-bundleeq1.1.3
admin-ui-classic-bundleeq1.2.3
admin-ui-classic-bundleeq1.0.5
admin-ui-classic-bundleeq1.0.1
admin-ui-classic-bundleeq1.2.2

Name	Operator	Version
admin-ui-classic-bundle	eq	1.2.0
admin-ui-classic-bundle	eq	1.2.1
admin-ui-classic-bundle	eq	1.3.1
admin-ui-classic-bundle	eq	1.1.2
admin-ui-classic-bundle	eq	1.1.1
admin-ui-classic-bundle	eq	1.1.3
admin-ui-classic-bundle	eq	1.2.3
admin-ui-classic-bundle	eq	1.0.5
admin-ui-classic-bundle	eq	1.0.1
admin-ui-classic-bundle	eq	1.2.2