https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:17:33 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-161891 EUVD-2026-161891 https://cve.radiocsirt.org/vuln/euvd-2026-161891 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5844 <p>Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.</p> <p>Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-5844 https://cve.radiocsirt.org/vuln/ghsa-6f58-j323-6472 <p><strong>Affected:</strong> Packagist: pimcore/admin-ui-classic-bundle</p> <p>### Impact As old password can be set as new password , it is considered as password policy violation.</p> <p>Pimcore is not enforcing strict password policy which allow attacker to set old password as new password</p> <p>Proof of Concept 1. Go to Admin link 2. login and click on -&gt; &#34;User | My Profile&#34;. 3. Go to change password now put old password as new password and click save.</p> <p>### Patches https://github.com/pimcore/admin-ui-classic-bundle/commit/498ac77e54541177be27b0c710e387c47b3836ea.patch</p> <p>### Workarounds Update to version 1.2.0 or apply this patches manually https://github.com/pimcore/admin-ui-classic-bundle/commit/498ac77e54541177be27b0c710e387c47b3836ea.patch</p> <p>### References https://huntr.com/bounties/b031199d-192a-46e5-8c02-f7284ad74021/</p> <p><strong>Affected:</strong> Packagist: pimcore/admin-ui-classic-bundle</p> <p>### Impact As old password can be set as new password , it is considered as password policy violation.</p> <p>Pimcore is not enforcing strict password policy which allow attacker to set old password as new password</p> <p>Proof of Concept 1. Go to Admin link 2. login and click on -&gt; &#34;User | My Profile&#34;. 3. Go to change password now put old password as new password and click save.</p> <p>### Patches https://github.com/pimcore/admin-ui-classic-bundle/commit/498ac77e54541177be27b0c710e387c47b3836ea.patch</p> <p>### Workarounds Update to version 1.2.0 or apply this patches manually https://github.com/pimcore/admin-ui-classic-bundle/commit/498ac77e54541177be27b0c710e387c47b3836ea.patch</p> <p>### References https://huntr.com/bounties/b031199d-192a-46e5-8c02-f7284ad74021/</p> https://cve.radiocsirt.org/vuln/ghsa-6f58-j323-6472 https://cve.radiocsirt.org/vuln/gsd-2023-5844 gsd-2023-5844 https://cve.radiocsirt.org/vuln/gsd-2023-5844