CVE-2022-0565: Cross-site Scripting in pimcore/pimcore
Cross-site Scripting in Packagist pimcore/pimcore prior to 10.3.1.
Other sources
Exposure of Sensitive Information to an Unauthorized Actor in Packagist pimcore/pimcore prior to 10.3.1.
— GitHub
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-0565?
CVE-2022-0565 is a Cross-site Scripting vulnerability found in Packagist pimcore/pimcore prior to version 10.3.1.
How severe is CVE-2022-0565?
CVE-2022-0565 has a severity of high (7) based on the CVSS score.
How does CVE-2022-0565 affect Packagist pimcore/pimcore?
CVE-2022-0565 exposes sensitive information to an unauthorized actor in Packagist pimcore/pimcore prior to version 10.3.1.
What is the remedy for CVE-2022-0565?
The remedy for CVE-2022-0565 is to update Packagist pimcore/pimcore to version 10.3.1 or later.
Where can I find more information about CVE-2022-0565?
You can find more information about CVE-2022-0565 at the following references: [link](https://nvd.nist.gov/vuln/detail/CVE-2022-0565), [link](https://github.com/pimcore/pimcore/commit/7697f709a501860144352696e583a2533a6e1245), [link](https://huntr.dev/bounties/b0b29656-4bbe-41cf-92f6-8579df0b6de5).