https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T18:29:20.395954+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2018-16940 cnvd-2018-16940 2026-10-27T18:29:20.448564+00:00 cnvd-2018-16940 https://cve.radiocsirt.org/vuln/euvd-2026-66805 EUVD-2026-66805 2026-10-27T18:29:20.448607+00:00 EUVD-2026-66805 https://cve.radiocsirt.org/vuln/fkie_cve-2018-14057 fkie_cve-2018-14057 2026-10-27T18:29:20.448621+00:00

Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the X-pimcore-csrf-token anti-CSRF token only in the "Settings > Users / Roles" function.

 https://cve.radiocsirt.org/vuln/ghsa-gmff-vcv6-mmfr GHSA-gmff-vcv6-mmfr — Pimcore CSRF Vulnerability 2026-10-27T18:29:20.448657+00:00

Affected: Packagist: pimcore/pimcore

Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validation of the `X-pimcore-csrf-token` anti-CSRF token only in the "Settings > Users / Roles" function.

 https://cve.radiocsirt.org/vuln/gsd-2018-14057 gsd-2018-14057 2026-10-27T18:29:20.448681+00:00 gsd-2018-14057