GitHub Advisoryadvisory · Packagist

GHSA-r2vq-p658-p274 SameSite Attribute vulnerability in pimCore

HIGH Published 2023-02-13 Modified 2023-02-23 Official page ↗

Aliases: CVE-2023-25240
Ecosystem: Packagist
Packages: pimcore/pimcore
Severity: High
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: CWE-1265
Reviewed: 2023-02-14

Affected packages

• Packagist pimcore/pimcore: < 10.5.16 → fixed in 10.5.16

Description

An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.

Related

Alias · CVE (1)

CVE-2023-25240 An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code. vulnerability

Weakness · CWE (1)

CWE-1265 Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls weakness

References