2 matches found
GHSA-G93X-FM2W-5PXW Cross-site Scripting (XSS) in DataObject columns grid
Impact The attacker is capable to stolen the user session cookie. it will leads to complete account takeover. Patches Update to version 10.5.21 or apply this patch manually https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e.patch Workarounds Apply patch...
5.4CVSS5.5AI score0.00479EPSS
SaveExploits1References5
Cross-site Scripting (XSS) in DataObject columns grid
Impact The attacker is capable to stolen the user session cookie. it will leads to complete account takeover. Patches Update to version 10.5.21 or apply this patch manually https://github.com/pimcore/pimcore/commit/aa38319e353cc3cdfac12e03e21ed7a8f3628d3e.patch Workarounds Apply patch...
6.1CVSS6.7AI score0.00479EPSS
SaveExploits1References5Affected Software1
20