CVE-2023-46722
CVSS V2 None
CVSS V3 None
Description
The Pimcore Admin Classic Bundle provides a backend UI for Pimcore. Prior to version 1.2.0, a cross-site scripting vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Users should upgrade to version 1.2.0 to receive a patch or, as a workaround, apply the patch manually.
Overview
- CVE ID
- CVE-2023-46722
- Assigner
- GitHub_M
- Vulnerability Status
- PUBLISHED
- Published Version
- 2023-10-31T15:36:49.932Z
- Last Modified Date
- 2023-10-31T15:36:49.932Z
Weakness Enumerations
References
Reference URL | Reference Tags |
---|---|
https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-jfxw-6c5v-c42f | x_refsource_CONFIRM |
https://github.com/pimcore/admin-ui-classic-bundle/commit/19fda2e86557c2ed4978316104de5ccdaa66d8b9 | x_refsource_MISC |
https://github.com/pimcore/pimcore/commit/757375677dc83a44c6c22f26d97452cc5cda5d7c | x_refsource_MISC |
Sources
Source Name | Source URL |
---|---|
NIST | https://nvd.nist.gov/vuln/detail/CVE-2023-46722 |
MITRE | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-46722 |
History
Created | Old Value | New Value | Data Type | Notes |
---|---|---|---|---|
2024-06-24 22:31:46 | Added to TrackCVE |