Lucene search
Veracode Vulnerability DatabaseVERACODE:44094HistoryNov 01, 2023 - 11:36 a.m.
Cross-Site Scripting(XSS)
2023-11-0111:36:02
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
cross-site scripting
pdf vulnerability
browser injection
pimcore is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to the processDocument function which lack s checks whether a PDF document contains JavaScript code. This allows an attacker to to inject malicious scripts into the browser.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pimcore/pimcore | le | v11.0.12 | |
| pimcore/pimcore | le | v11.0.12 |
Related
osv
osv
CVE-2023-5873
2023-10-31 09:15:09
Pimcore Cross-site Scripting vulnerability
2023-10-31 09:30:54
github
github
Pimcore Cross-site Scripting vulnerability
2023-10-31 09:30:54
prion
prion
Cross site scripting
2023-10-31 09:15:00
cvelist
cvelist
CVE-2023-5873 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
2023-10-31 08:06:44
huntr
huntr
XSS in Upload file PDF in pimcore/pimcore
2023-03-26 13:56:31
cve
cve
CVE-2023-5873
2023-10-31 09:15:09