CVE-2022-39365

Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in "Pimcore/Mail" & "ClassDefinition\Layout\Text" is vulnerable to server-side template injection, which could lead to remote code execution. Version 10.5.9...

PT-2022-24932

Name of the Vulnerable Software and Affected Versions Pimcore versions prior to 10.5.9 Description The user-controlled twig templates rendering in Pimcore/Mail and ClassDefinitionLayoutText is vulnerable to server-side template injection, which could lead to remote code execution. Recommendations...

CVE-2022-39365: Improper Control of Generation of Code

Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in Pimcore/Mail & ClassDefinition\Layout\Text is vulnerable to server-side template injection, which could lead to remote code execution. Version 10.5.9 contain...