PT-2024-20588

Name of the Vulnerable Software and Affected Versions Pimcore's Admin Classic Bundle versions prior to 1.3.3 Description The issue allows an attacker to create, delete, etc., tags without having the permission to do so, due to a broken access control flaw. This can lead to the addition of dummy...

PT-2024-19997

Name of the Vulnerable Software and Affected Versions Pimcore's Admin Classic Bundle versions prior to 1.3.2 Description The application allows users to create zip files from available files on the site. The parameter selectedIds is susceptible to SQL Injection. Any backend user with very basic...