CVE-2024-24822
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
概要
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to do so. A fix is available in version 1.3.3. As a workaround, one may apply the patch manually.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com