CVE-2019-18981
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification.
Affected Platforms (CPE)
📦
Pimcore
Back to CVE Browser
Related Vulnerabilities
CVE-2019-189859.8
Pimcore before 6.2.2 lacks brute force protection for the 2FA token.
CVE-2021-41399.0
pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-163188.8
In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, ...
CVE-2019-163178.8
In Pimcore before 5.7.1, an attacker with limited privileges can trigger execution of a .phar file via a phar:// URL in a filename...