Description
Pimcore存在跨站脚本漏洞，此漏洞是由于输入验证不正确造成的。
Pimcore CVE-2022-0831跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2022-0831
https://huntr.com/repos/pimcore/pimcore
https://advisories.checkpoint.com/defense/advisories/public/2022/cpai-2022-0588.html
https://docs.devguard.org/vulnerability-database/CVE-2022-0831/
https://scanrepeat.com/vulnerability-database/pimcore-cross-site-scripting
https://advisories.gitlab.com/pkg/composer/pimcore/pimcore/
https://security.snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-2426977
https://cxsecurity.com/cveproduct/24518/pimcore/
https://cve.circl.lu/vuln/cnvd-2022-22704
https://www.thehackerwire.com/vulnerability/CVE-2022-0831/
https://app.opencve.io/cve/?product=pimcore&vendor=pimcore
https://dep-downloads.ngfw.forcepoint.com/download/llm_dynup/LLM-Dynup-1448-Release-Note.html