https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 25 Oct 2026 19:09:52 +0000 https://cve.radiocsirt.org/vuln/cnvd-2023-64642 cnvd-2023-64642 https://cve.radiocsirt.org/vuln/cnvd-2023-64642 https://cve.radiocsirt.org/vuln/euvd-2026-192010 EUVD-2026-192010 https://cve.radiocsirt.org/vuln/euvd-2026-192010 https://cve.radiocsirt.org/vuln/fkie_cve-2023-38708 <p>Pimcore is an Open Source Data &amp; Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS &amp; Digital Commerce. A path traversal vulnerability exists in the `AssetController::importServerFilesAction`, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.This can lead to potential denial of service---key file overwrite. The impact of this vulnerability allows attackers to: overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information. This could also cause a denial of service (DoS) if critical system files are overwritten or deleted.</p> <p>Pimcore is an Open Source Data &amp; Experience Management Platform: PIM, MDM, CDP, DAM, DXP/CMS &amp; Digital Commerce. A path traversal vulnerability exists in the `AssetController::importServerFilesAction`, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.This can lead to potential denial of service---key file overwrite. The impact of this vulnerability allows attackers to: overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information. This could also cause a denial of service (DoS) if critical system files are overwritten or deleted.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-38708 https://cve.radiocsirt.org/vuln/ghsa-34hj-v8fm-x887 <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Impact A path traversal vulnerability exists in the `AssetController::importServerFilesAction`, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.This can lead to potential denial of service---key file overwrite.</p> <p>The impact of this vulnerability allows attackers to:</p> <p>Overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information.</p> <p>Tamper with system settings by modifying key files, such as the hosts file in Windows or configuration files for other services.</p> <p>Cause a denial of service (DoS) if critical system files are overwritten or deleted.</p> <p>The consequences of exploiting this vulnerability can be detrimental to the confidentiality, integrity, and availability of the affected system. It&#39;s crucial to address this vulnerability to protect sensitive data and ensure the proper functioning of the system.</p> <p>### Patches Update to version 10.6.7 or apply this patch manually https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c.patch</p> <p>### Workarounds Apply patch https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c.patch manually.</p> <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>### Impact A path traversal vulnerability exists in the `AssetController::importServerFilesAction`, which allows an attacker to overwrite or modify sensitive files by manipulating the pimcore_log parameter.This can lead to potential denial of service---key file overwrite.</p> <p>The impact of this vulnerability allows attackers to:</p> <p>Overwrite or modify sensitive files, potentially leading to unauthorized access, privilege escalation, or disclosure of confidential information.</p> <p>Tamper with system settings by modifying key files, such as the hosts file in Windows or configuration files for other services.</p> <p>Cause a denial of service (DoS) if critical system files are overwritten or deleted.</p> <p>The consequences of exploiting this vulnerability can be detrimental to the confidentiality, integrity, and availability of the affected system. It&#39;s crucial to address this vulnerability to protect sensitive data and ensure the proper functioning of the system.</p> <p>### Patches Update to version 10.6.7 or apply this patch manually https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c.patch</p> <p>### Workarounds Apply patch https://github.com/pimcore/pimcore/commit/58012d0e3b8b926fb54eccbd64ec5c993b30c22c.patch manually.</p> https://cve.radiocsirt.org/vuln/ghsa-34hj-v8fm-x887 https://cve.radiocsirt.org/vuln/gsd-2023-38708 gsd-2023-38708 https://cve.radiocsirt.org/vuln/gsd-2023-38708