GHSA-54hw-mhgh-x4vc
Business Logic Errors in pimcore
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | pimcore/pimcore | < 10.2.9 | 10.2.9 |
Details
As written in the advisory (Markdown source, shown as plain text).
In pimcore versions prior to 10.2.9 discounts could be negative resulting in unintended behavior.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2021-4146
- https://github.com/pimcore/pimcore/issues/11024
- https://github.com/pimcore/pimcore/pull/11206
- https://github.com/pimcore/pimcore/commit/7011922f7f0f97a82d8c378559b91fcdb34604a6
- https://github.com/pimcore/pimcore
- https://huntr.dev/bounties/47b37054-cafe-4f48-8b40-c86efc7fb760