Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/03/26 7:32 p.m.40 views

Pimcore Preview Documents are not restricted to logged in users anymore

Summary Any call with the query argument ?pimcorepreview=true allows to view unpublished sites. Event if in incognito window. Due to the behaviour of how previews should work, this also applies to internal documents, say an intranet which could be really severe. Details In previous versions of...

6.5CVSS6.7AI score0.00713EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder