Pimcore 安全漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/pimcore/pimcore/security/advisories
• https://nvd.nist.gov/vuln/detail/CVE-2024-49370
• https://www.sonarsource.com/blog/pimcore-one-click-two-security-vulnerabilities
• https://sec-consult.com/vulnerability-lab/advisory/sql-injection-xss-csrf-vulnerabilities-in-pimcore-software/
• https://app.opencve.io/cve/?product=pimcore&vendor=pimcore
• https://www.securityweek.com/pimcore-platform-flaws-exposed-users-to-code-execution/
• https://www.exploit-db.com/exploits/52194
• https://www.tenable.com/security/research/tra-2024-01
• https://security.snyk.io/package/composer/pimcore%2Fpimcore
• https://nvd.nist.gov/vuln/detail/CVE-2025-27617

Related Vulnerabilities

• Pimcore grid-proxy CVE-2023-47637 SQL注入漏洞
• Pimcore CVE-2022-1429 SQL注入漏洞
• Pimcore CVE-2022-0831跨站脚本漏洞
• Pimcore CVE-2022-0258 SQL注入漏洞
• Pimcore标题字段存储型跨站脚本漏洞
• Pimcore GridHelperService.php SQL 注入漏洞
• Pimcore SearchController.php SQL注入漏洞
• Pimcore CVE-2023-2984 目录遍历漏洞
• (CVE-2023-3574) Pimcore Web内容管理平台 输入验证漏洞
• (CVE-2023-2339) pimcore/pimcore 跨站脚本漏洞