CVE-2023-2630: Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Impact Execute Javascript code on victim browsers and potentially steal cookies to takeover their account.
Patches Update to version 10.5.21 or apply this patches manually https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
Workarounds Apply patches manually: https://github.com/pimcore/pimcore/commit/7e32cc28145274ddfc30fb791012d26c1278bd38.patch
References https://huntr.dev/bounties/e1001870-b8d8-4921-8b9c-bbdfb1a1491e/
Other sources
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.21.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2023-2630?
The severity of CVE-2023-2630 is medium, with a severity value of 4.8.
How does CVE-2023-2630 affect Pimcore?
CVE-2023-2630 affects Pimcore versions prior to 10.5.21.
What is the CWE number for CVE-2023-2630?
The CWE number for CVE-2023-2630 is 79.
How do I fix the Cross-site Scripting (XSS) vulnerability CVE-2023-2630?
To fix the Cross-site Scripting (XSS) vulnerability CVE-2023-2630, update your Pimcore installation to version 10.5.21 or above.
Are there any references for CVE-2023-2630?
Yes, you can find references for CVE-2023-2630 at the following links: [link1], [link2].