https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 13:00:45 +0000 https://cve.radiocsirt.org/vuln/cnvd-2021-18391 cnvd-2021-18391 https://cve.radiocsirt.org/vuln/cnvd-2021-18391 https://cve.radiocsirt.org/vuln/euvd-2026-184443 EUVD-2026-184443 https://cve.radiocsirt.org/vuln/euvd-2026-184443 https://cve.radiocsirt.org/vuln/fkie_cve-2021-23340 <p>This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user can reach this function with a GET request at the following endpoint: /admin/reports/custom-report/download-csv?exportFile=&amp;91;filename]. Since exportFile variable is not sanitized, an attacker can exploit a local file inclusion vulnerability.</p> <p>This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user can reach this function with a GET request at the following endpoint: /admin/reports/custom-report/download-csv?exportFile=&amp;91;filename]. Since exportFile variable is not sanitized, an attacker can exploit a local file inclusion vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-23340 https://cve.radiocsirt.org/vuln/ghsa-h7f9-cvh5-qw7f <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user can reach this function with a GET request at the following endpoint: /admin/reports/custom-report/download-csv?exportFile=&amp;91;filename]. Since exportFile variable is not sanitized, an attacker can exploit a local file inclusion vulnerability.</p> <p><strong>Affected:</strong> Packagist: pimcore/pimcore</p> <p>This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user can reach this function with a GET request at the following endpoint: /admin/reports/custom-report/download-csv?exportFile=&amp;91;filename]. Since exportFile variable is not sanitized, an attacker can exploit a local file inclusion vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-h7f9-cvh5-qw7f https://cve.radiocsirt.org/vuln/gsd-2021-23340 gsd-2021-23340 https://cve.radiocsirt.org/vuln/gsd-2021-23340