Vulnerabilities > Pimcore > Customer Management Framework > High

DATE CVE VULNERABILITY TITLE RISK
2023-05-17 CVE-2023-2756 SQL Injection vulnerability in Pimcore Customer Management Framework
SQL Injection in GitHub repository pimcore/customer-data-framework prior to 3.3.10.
network
low complexity
pimcore CWE-89
7.2
2023-05-10 CVE-2023-2629 Improper Neutralization of Formula Elements in a CSV File vulnerability in Pimcore Customer Management Framework
Improper Neutralization of Formula Elements in a CSV File in GitHub repository pimcore/customer-data-framework prior to 3.3.9.
local
low complexity
pimcore CWE-1236
7.8