CVE-2022-0510: Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Published Feb 8, 2022
·Updated
Cross-site Scripting (XSS) - Reflected in Packagist pimcore/pimcore prior to 10.3.1.
Other sources
pimcore version 10.3.0 and prior is vulnerable to cross-site scripting.
Affected Software
2 affected componentsFixes available
composer/pimcore/pimcore<=10.3.0
10.3.1
Pimcore pimcore<=10.3.0
Remediation
Event History
Feb 8, 2022
CVE Published
via MITRE·02:20 PM
Data Sourced
via MITRE·02:20 PM
DescriptionSeverityWeakness
Feb 9, 2022
Advisory Published
12:00 AM
Frequently Asked Questions
1
What is the severity of CVE-2022-0510?
CVE-2022-0510 has a moderate severity level due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2022-0510?
To fix CVE-2022-0510, upgrade to Pimcore version 10.3.1 or later.
3
Who is affected by CVE-2022-0510?
CVE-2022-0510 affects all users of Pimcore versions prior to 10.3.1.
4
What is the nature of the vulnerability in CVE-2022-0510?
CVE-2022-0510 is a reflected cross-site scripting (XSS) vulnerability.
5
Can CVE-2022-0510 be exploited remotely?
Yes, CVE-2022-0510 can be exploited remotely by attackers through specially crafted URLs.