~ / search / GHSA-w6j8-jc36-x5q9

GHSA-w6j8-jc36-x5q9

Improper Neutralization of Text-Values in Object Version Preview

Source: GitHub Advisory Database (reviewed) High CVE-2021-39166

Packages

EcosystemPackageAffectedFixed in
Packagist pimcore/pimcore < 10.1.2 10.1.2

Details

As written in the advisory (Markdown source, shown as plain text).

Text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticated users with access to the resources.

References

External links from the advisory. They lead to third-party sites.