https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:47:04 +0000 https://cve.radiocsirt.org/vuln/cnvd-2023-43860 cnvd-2023-43860 https://cve.radiocsirt.org/vuln/cnvd-2023-43860 https://cve.radiocsirt.org/vuln/euvd-2026-210231 EUVD-2026-210231 https://cve.radiocsirt.org/vuln/euvd-2026-210231 https://cve.radiocsirt.org/vuln/fkie_cve-2023-2984 <p>Path Traversal: &#39;\..\filename&#39; in GitHub repository pimcore/pimcore prior to 10.5.22.</p> <p>Path Traversal: &#39;\..\filename&#39; in GitHub repository pimcore/pimcore prior to 10.5.22.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-2984 https://cve.radiocsirt.org/vuln/ghsa-46g3-f9r8-xj4v <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Impact</p> <p>A path traversal vulnerability exists in the CMS, which allows an attacker to overwrite or modify sensitive files by manipulating the `pimcore_log` parameter.This can lead to potential denial of service---key file overwrite.</p> <p>The impact of this vulnerability allows attackers to:</p> <p>- Overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information.</p> <p>- Tamper with system settings by modifying key files, such as the hosts file in Windows or configuration files for other services.</p> <p>- Cause a denial of service (DoS) if critical system files are overwritten or deleted.</p> <p>The consequences of exploiting this vulnerability can be detrimental to the confidentiality, integrity, and availability of the affected system. It&#39;s crucial to address this vulnerability to protect sensitive data and ensure the proper functioning of the system.</p> <p>### Patches Update to version 10.5.22 or apply this patch manually https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed.patch</p> <p>### Workarounds Apply patch https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed.patch manually.</p> <p>### References https://huntr.dev/bounties/5df8b951-e2f1-4548-a7e3-601186e1b191/</p> <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Impact</p> <p>A path traversal vulnerability exists in the CMS, which allows an attacker to overwrite or modify sensitive files by manipulating the `pimcore_log` parameter.This can lead to potential denial of service---key file overwrite.</p> <p>The impact of this vulnerability allows attackers to:</p> <p>- Overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information.</p> <p>- Tamper with system settings by modifying key files, such as the hosts file in Windows or configuration files for other services.</p> <p>- Cause a denial of service (DoS) if critical system files are overwritten or deleted.</p> <p>The consequences of exploiting this vulnerability can be detrimental to the confidentiality, integrity, and availability of the affected system. It&#39;s crucial to address this vulnerability to protect sensitive data and ensure the proper functioning of the system.</p> <p>### Patches Update to version 10.5.22 or apply this patch manually https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed.patch</p> <p>### Workarounds Apply patch https://github.com/pimcore/pimcore/commit/e8dbc4da58ae86618bceb67ed35ce23e5e54d2ed.patch manually.</p> <p>### References https://huntr.dev/bounties/5df8b951-e2f1-4548-a7e3-601186e1b191/</p> https://cve.radiocsirt.org/vuln/ghsa-46g3-f9r8-xj4v https://cve.radiocsirt.org/vuln/gsd-2023-2984 gsd-2023-2984 https://cve.radiocsirt.org/vuln/gsd-2023-2984