Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 9
Reset filtersPimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list
pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name
Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller
Pimcore customers' list user password hash is disclosed
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
Pimcore vulnerable to Business Logic Errors via Customer automation rules
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.