Pimcore Perspective Editor vulnerable to Cross-site Scripting in perspective name
Résumé
Pimcore Perspective Editor vulnerable to Cross-site Scripting in perspective name
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Pimcore Perspective Editor provides an editor for Pimcore that allows users to add/remove/edit custom views and perspectives. This vulnerability has the potential to steal a user's cookie and gain unauthorized access to that user's account through the stolen cookie or redirect users to other malicious sites. Version 1.5.1 has a patch. As a workaround, one may apply the patch manually.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web huntr.dev