Open Source Vulnerabilities

Cross-site Scripting (XSS) - Stored in pimcore/pimcore

Relative Path Traversal in mlflow/mlflow

wwbn/avideo

Remote code injection in wwbn/avideo

org.bitbucket.b_c:jose4j

Chosen Ciphertext Attack in Jose4j

pimcore/pimcore

Arbitrary File Read in Admin JS CSS files

pimcore/pimcore

Cross-site Scripting (XSS) in DataObject columns grid

pimcore/pimcore

Cross-site Scripting (XSS) in DataObject Any Getter grid operator

pimcore/pimcore

Path Traversal in Asset "import from server" option

pimcore/pimcore

Cross-site Scripting (XSS) in Conditions tab of Pricing Rules

linux-azure, linux-azure, linux-gcp, linux-hwe, linux-oracle, linux, linux-aws-5.4, linux-azure-4.15, linux-azure-5.4, linux-gcp-4.15, linux-gcp-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux, linux-aws, linux-azure, linux-gcp, linux-gke, linux-gkeop, linux-ibm, linux-kvm, linux-oracle

linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-4.15, linux-azure-5.4, linux-gcp, linux-gcp-4.15, linux-gcp-5.4, linux-gke, linux-gkeop, linux-hwe, linux-hwe-5.4, linux-ibm, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerability

com.typesafe.akka:akka-stream-kafka_3, com.typesafe.akka:akka-stream-kafka_2.13, com.typesafe.akka:akka-stream-kafka_2.12, com.typesafe.akka:akka-stream-kafka_2.11

Lightbend Alpakka Kafka logs credentials on debug level

swftools, swftools

pimcore/pimcore

Cross-site Scripting (XSS) in DataObjects QuantityValue Unit Definition

pimcore/pimcore

Cross-site Scripting (XSS) in pimcore via DataObject Class date fields

pimcore/pimcore

Cross-site Scripting (XSS) in Ecommerce Pricing Rules name field

pimcore/pimcore

Cross-site Scripting (XSS) in Document Properties Parameter

pimcore/pimcore

SQL Injection in AssetController

pimcore/pimcore

Cross-site Scripting (XSS) in Website Settings name field

pimcore/pimcore

Cross-site Scripting (XSS) in Admin Login too many attempts notice

pimcore/pimcore

Cross-site Scripting (XSS) in DataObject Classification Store