Arbitrary Code Injection

akeneo/pim-community-dev is vulnerable to arbitrary code injection. The vulnerability exists in Location parameter in httpd.conf because of not properly validate user inputs which allows an attacker to inject and execute malicious code into the system...

Memory Leak Vulnerability

pim-community-dev is vulnerable to memory leaks. The execute function in CalculateCompletenessCommand.php does not detach objects, leading to memory leaks resulting in an application crash...