EUVD-2022-4373

Malicious code in bioql PyPI...

EUVD-2023-0672

Malicious code in bioql PyPI...

CVE-2023-28106

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually...

CVE-2019-10867

An issue was discovered in Pimcore before 5.7.1. An attacker with classes permission can send a POST request to /admin/class/bulk-commit, which will make it possible to exploit the unserialize function when passing untrusted values in the data parameter to...

Directory Traversal

pimcore is vulnerable to directory traversal attacks. The library does not properly validate the filepath, allowing a malicious user to pass a filepath without the file to the application...