What’s Vulnerable › Products

pimcore/customer-data-framework vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your pimcore/customer-data-framework version is affected

Latest pimcore/customer-data-framework vulnerabilities

• CVE-2024-21667 — Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts (CVSS 6.5)
• CVE-2024-21666 — Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list (CVSS 6.5)
• CVE-2023-4145 — Cross-site Scripting (XSS) - Stored in pimcore/customer-data-framework (CVSS 5.4)
• CVE-2023-3574 — Improper Authorization in pimcore/customer-data-framework (CVSS 6.5)
• CVE-2023-2881 — Storing Passwords in a Recoverable Format in pimcore/customer-data-framework (CVSS 4.9)
• CVE-2023-2756 — SQL Injection in pimcore/customer-data-framework (CVSS 7.2)
• CVE-2023-32075 — Pimcore vulnerable to Business Logic Errors in Customer automation rules (CVSS 4.3)
• CVE-2023-2629 — Improper Neutralization of Formula Elements in a CSV File in pimcore/customer-data-framework (CVSS 7.8)
• CVE-2021-31867 — Pimcore Customer Data Framework 'SegmentAssignmentController.php' Blind SQL Injection (CVSS 7.5)