Lucene search
Veracode Vulnerability DatabaseVERACODE:40536HistoryMay 16, 2023 - 4:10 a.m.
Business Logic Flaws
2023-05-1604:10:32
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
pimcore
customer management
business logic
software
conditions
vulnerabilities
errors
EPSS
0.001
Percentile
36.2%
pimcore/customer-management-framework-bundle is vulnerable to Business Logic Flaws. The Conditions tab is vulnerable to business logic errors due to allowing a negative number as a counter.
References
github.com/pimcore/customer-data-framework/commit/e3f333391582d9309115e6b94e875367d0ea7163
github.com/pimcore/customer-data-framework/commit/e3f333391582d9309115e6b94e875367d0ea7163.patch
github.com/pimcore/customer-data-framework/issues/455
github.com/pimcore/customer-data-framework/pull/466
github.com/pimcore/customer-data-framework/releases/tag/v3.3.9
github.com/pimcore/customer-data-framework/security/advisories/GHSA-x99j-r8vv-gwwj
huntr.dev/bounties/cecd7800-a996-4f3a-8689-e1c2a1e0248a/
Related
cvelist
cvelist
osv
osv
Pimcore vulnerable to Business Logic Errors via Customer automation rules
2023-05-11 16:39:47
CVE-2023-32075
2023-05-11 17:15:09
github
github
Pimcore vulnerable to Business Logic Errors via Customer automation rules
2023-05-11 16:39:47
cve
cve
CVE-2023-32075
2023-05-11 17:15:09
prion
prion
Design/Logic Flaw
2023-05-11 17:15:00
nvd
nvd
CVE-2023-32075
2023-05-11 17:15:09