CVE-2018-14059: XSS
Pimcore allows XSS via Users, Assets, Data Objects, Video Thumbnails, Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes functions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-14059?
CVE-2018-14059 is classified as a high severity vulnerability due to its potential for exploitation through XSS attacks.
How do I fix CVE-2018-14059?
To mitigate CVE-2018-14059, upgrade Pimcore to version 5.3.0 or later.
What specific features of Pimcore are affected by CVE-2018-14059?
CVE-2018-14059 affects Users, Assets, Data Objects, Video and Image Thumbnails, Field-Collections, Objectbrick, Classification Store, Document Types, Predefined Properties, Predefined Asset Metadata, Quantity Value, and Static Routes.
Can CVE-2018-14059 be exploited remotely?
Yes, CVE-2018-14059 can be exploited remotely through web interfaces that do not properly validate user input.
What types of attacks can result from CVE-2018-14059?
CVE-2018-14059 can lead to cross-site scripting (XSS) attacks, potentially allowing attackers to execute malicious scripts in a user's browser.