Vulnerabilities > Pimcore > Pimcore > 10.0.5

DATE CVE VULNERABILITY TITLE RISK
2023-05-30 CVE-2023-2984 Path Traversal: '..filename' vulnerability in Pimcore
Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22.
network
low complexity
pimcore CWE-29
8.8
2023-05-16 CVE-2023-2730 Cross-site Scripting vulnerability in Pimcore
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.3.3.
network
low complexity
pimcore CWE-79
5.4
2023-05-10 CVE-2023-2630 Cross-site Scripting vulnerability in Pimcore
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
network
low complexity
pimcore CWE-79
4.8
2023-05-10 CVE-2023-2614 Cross-site Scripting vulnerability in Pimcore
Cross-site Scripting (XSS) - DOM in GitHub repository pimcore/pimcore prior to 10.5.21.
network
low complexity
pimcore CWE-79
5.4
2023-05-10 CVE-2023-2615 Cross-site Scripting vulnerability in Pimcore
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.21.
network
low complexity
pimcore CWE-79
5.4
2023-05-10 CVE-2023-2616 Cross-site Scripting vulnerability in Pimcore
Cross-site Scripting (XSS) - Generic in GitHub repository pimcore/pimcore prior to 10.5.21.
network
low complexity
pimcore CWE-79
5.4
2023-05-08 CVE-2023-30855 Path Traversal vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-22
7.5
2023-04-28 CVE-2023-2361 Cross-site Scripting vulnerability in Pimcore
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
network
low complexity
pimcore CWE-79
5.4
2023-04-27 CVE-2023-30850 SQL Injection vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-89
8.8
2023-04-27 CVE-2023-30852 Path Traversal vulnerability in Pimcore
Pimcore is an open source data and experience management platform.
network
low complexity
pimcore CWE-22
4.9