Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:54:32 +0000 EUVD-2026-198499 https://cve.radiocsirt.org/vuln/euvd-2026-198499 EUVD-2026-198499 https://cve.radiocsirt.org/vuln/euvd-2026-198499 fkie_cve-2023-3574 https://cve.radiocsirt.org/vuln/fkie_cve-2023-3574 <p>Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.</p> <p>Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-3574 GHSA-vx35-f379-4q49 — Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller https://cve.radiocsirt.org/vuln/ghsa-vx35-f379-4q49 <p><strong>Affected:</strong> Packagist: pimcore/customer-management-framework-bundle</p> <p>### Impact The product performs authorization checks incorrectly when an unauthorized actor tries to access a resource or perform an actions.</p> <p>The attacker can view and freely perform actions to add, modify, or delete rules.</p> <p>### Patches Update to version 3.4.1 or apply this patch manually https://github.com/pimcore/customer-data-framework/commit/f15668c86db254e86ba7ac895bc3cdd1a2a3cc45.patch</p> <p>### Workarounds Apply https://github.com/pimcore/customer-data-framework/commit/f15668c86db254e86ba7ac895bc3cdd1a2a3cc45.patch manually.</p> <p>### References https://huntr.dev/bounties/1dcb4f01-e668-4aa3-a6a3-838532e500c6/</p> <p><strong>Affected:</strong> Packagist: pimcore/customer-management-framework-bundle</p> <p>### Impact The product performs authorization checks incorrectly when an unauthorized actor tries to access a resource or perform an actions.</p> <p>The attacker can view and freely perform actions to add, modify, or delete rules.</p> <p>### Patches Update to version 3.4.1 or apply this patch manually https://github.com/pimcore/customer-data-framework/commit/f15668c86db254e86ba7ac895bc3cdd1a2a3cc45.patch</p> <p>### Workarounds Apply https://github.com/pimcore/customer-data-framework/commit/f15668c86db254e86ba7ac895bc3cdd1a2a3cc45.patch manually.</p> <p>### References https://huntr.dev/bounties/1dcb4f01-e668-4aa3-a6a3-838532e500c6/</p> https://cve.radiocsirt.org/vuln/ghsa-vx35-f379-4q49 gsd-2023-3574 https://cve.radiocsirt.org/vuln/gsd-2023-3574 gsd-2023-3574 https://cve.radiocsirt.org/vuln/gsd-2023-3574