PT-2014-4957

Name of the Vulnerable Software and Affected Versions pimcore versions 1.4.9 through 2.0.0 Description The issue concerns the getObjectByToken function in the Pimcore Tool Newsletter module, which does not properly handle objects obtained from unserializing Lucene search data. This allows remote...

PT-2014-4958

Name of the Vulnerable Software and Affected Versions pimcore versions 1.4.9 through 2.1.0 Description The issue concerns the getObjectByToken function in Newsletter.php within the Pimcore Tool Newsletter module. It fails to properly handle an object obtained by unserializing a pathname, allowing...