Unauthorized Access

pimcore/pimcore is vulnerable to unauthorized access. Lack of access checks in certain scenarios whereby an incorrect recipient ID of a notification is submitted, allows unauthorized access to system resources...

CVE-2019-18981

Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification...