Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 24 Oct 2026 03:47:12 +0000 EUVD-2026-233454 https://cve.radiocsirt.org/vuln/euvd-2026-233454 EUVD-2026-233454 https://cve.radiocsirt.org/vuln/euvd-2026-233454 fkie_cve-2022-39365 https://cve.radiocsirt.org/vuln/fkie_cve-2022-39365 <p>Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in `Pimcore/Mail` &amp; `ClassDefinition\Layout\Text` is vulnerable to server-side template injection, which could lead to remote code execution. Version 10.5.9 contains a patch for this issue. As a workaround, one may apply the patch manually.</p> <p>Pimcore is an open source data and experience management platform. Prior to version 10.5.9, the user controlled twig templates rendering in `Pimcore/Mail` &amp; `ClassDefinition\Layout\Text` is vulnerable to server-side template injection, which could lead to remote code execution. Version 10.5.9 contains a patch for this issue. As a workaround, one may apply the patch manually.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-39365 GHSA-5qxq-vgmm-q39m — RCE vulnerability in Pimcore/Mail & Dynamic Text Layout https://cve.radiocsirt.org/vuln/ghsa-5qxq-vgmm-q39m <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Impact The user controlled twig templates rendering in `Pimcore/Mail` &amp; `ClassDefinition\Layout\Text` is vulnerable to server-side template Injection RCE.</p> <p>### Patches Update to version 10.5.9 or apply this patch manually https://github.com/pimcore/pimcore/pull/13347.patch</p> <p>### Workarounds Apply https://github.com/pimcore/pimcore/pull/13347.patch manually.</p> <p>### References Credits: @nth347 from Viettel Cyber Security</p> <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Impact The user controlled twig templates rendering in `Pimcore/Mail` &amp; `ClassDefinition\Layout\Text` is vulnerable to server-side template Injection RCE.</p> <p>### Patches Update to version 10.5.9 or apply this patch manually https://github.com/pimcore/pimcore/pull/13347.patch</p> <p>### Workarounds Apply https://github.com/pimcore/pimcore/pull/13347.patch manually.</p> <p>### References Credits: @nth347 from Viettel Cyber Security</p> https://cve.radiocsirt.org/vuln/ghsa-5qxq-vgmm-q39m gsd-2022-39365 https://cve.radiocsirt.org/vuln/gsd-2022-39365 gsd-2022-39365 https://cve.radiocsirt.org/vuln/gsd-2022-39365