CVE-2024-24822
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Résumé
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to do so. A fix is available in version 1.3.3. As a workaround, one may apply the patch manually.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com