Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2023/03/22 6:36 p.m.34 views

Pimcore Remote Code Execution vulnerability in Search function

Impact Attacker can get full DB and maybe RCE knowing the WEBROOT path Patches Update to version 10.5.19 or apply this patch manually https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2.patch Workarounds Apply patch...

8.8CVSS8.4AI score0.65115EPSS
SaveExploits1References6Affected Software1
OSV
OSV
added 2023/03/22 6:36 p.m.48 views

GHSA-42C3-WVWW-GCQJ Pimcore Remote Code Execution vulnerability in Search function

Impact Attacker can get full DB and maybe RCE knowing the WEBROOT path Patches Update to version 10.5.19 or apply this patch manually https://github.com/pimcore/pimcore/commit/367b74488808d71ec3f66f4ca9e8df5217c2c8d2.patch Workarounds Apply patch...

6.5CVSS7.4AI score0.65115EPSS
SaveExploits1References6
Rows per page
Query Builder