Pimcore Cross Site Scripting (CVE-2022-0831; CVE-2022-0832)

A cross site scripting vulnerability exists in Pimcore. Successful exploitation of this vulnerability would allow remote attackers to inject an arbitrary script into the affected system...

CVE-2022-0831

creationtimestamp| type| source ---|---|--- 2022-03-04 16:26:57+00:00| seen| https://t.me/cibsecurity/38416...

CVE-2022-0831

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...

CVE-2022-0831 Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Cross-site Scripting XSS - Stored in GitHub repository pimcore/pimcore prior to 10.3.3...

CVE-2022-0831

CVE-2022-0831 is a stored cross-site scripting vulnerability in the Pimcore project. Affected: Pimcore versions prior to 10.3.3 (Pimcore/pimcore). Root cause: user input in the Key field is not properly sanitized, allowing injected scripts to be stored and potentially executed in a victim’s brows...