CVE-2020-26246

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website settings without having the appropriate permissions...

CVE-2020-26246

creationtimestamp| type| source ---|---|--- 2020-12-03 07:55:39+00:00| seen| https://t.me/cibsecurity/17069...

CVE-2020-26246

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website settings without having the appropriate permissions...

CVE-2020-26246

Pimcore prior to version 6.8.5 is vulnerable to an authorization bypass that allows modifying and creating website settings without proper permissions. The issue stems from insufficient access rights enforcement, enabling an unauthorised user to alter settings, redirects, and asset metadata. Affe...

CVE-2020-26246 Authorization bypass in Pimcore

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website settings without having the appropriate permissions...