CVE-2023-3821: Cross-site Scripting (XSS) - Stored in pimcore/pimcore
Published Jul 21, 2023
·Updated
Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.6.4.
Affected Software
2 affected componentsFixes available
composer/pimcore/pimcore<10.6.4
10.6.4
Pimcore pimcore<10.6.4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/pimcore/pimcoreto a version that resolves this vulnerability.Fixed in 10.6.4
Event History
Jul 21, 2023
CVE Published
via MITRE·02:50 PM
Data Sourced
via MITRE·02:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Advisory Published
03:30 PM
Frequently Asked Questions
1
What is CVE-2023-3821?
CVE-2023-3821 is a vulnerability that allows attackers to inject malicious scripts in a Pimcore GitHub repository prior to version 10.6.4, leading to potential cross-site scripting (XSS) attacks.
2
How severe is CVE-2023-3821?
CVE-2023-3821 is considered a medium severity vulnerability with a severity rating of 6.1.
3
Which software versions are affected by CVE-2023-3821?
CVE-2023-3821 affects Pimcore versions prior to 10.6.4.
4
How can I fix CVE-2023-3821?
To fix CVE-2023-3821, update your Pimcore repository to version 10.6.4 or later.
5
Where can I find more information about CVE-2023-3821?
You can find more information about CVE-2023-3821 at the following references: [1] [2] [3].