~ / search / GHSA-jhcf-j4hg-v64r

GHSA-jhcf-j4hg-v64r

Pimcore Access Control Issues

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-18981

Packages

EcosystemPackageAffectedFixed in
Packagist pimcore/pimcore < 6.2.2 6.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification.

References

External links from the advisory. They lead to third-party sites.