CVE-2023-3822: Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/pimcore/pimcoreto a version that resolves this vulnerability.Fixed in 10.6.4
Event History
Frequently Asked Questions
What is the severity of CVE-2023-3822?
The severity of CVE-2023-3822 is medium.
What is the description of CVE-2023-3822?
CVE-2023-3822 is a Cross-site Scripting (XSS) vulnerability that allows reflected XSS attacks in the GitHub repository pimcore/pimcore prior to version 10.6.4.
What software is affected by CVE-2023-3822?
The software affected by CVE-2023-3822 is pimcore/pimcore versions prior to 10.6.4.
How can I fix CVE-2023-3822?
To fix CVE-2023-3822, you should upgrade to version 10.6.4 of pimcore/pimcore.
Where can I find more information about CVE-2023-3822?
You can find more information about CVE-2023-3822 at the following references: [Link 1](https://github.com/pimcore/pimcore/commit/d75888a9b14baaad591548463cca09dfd1395236), [Link 2](https://huntr.dev/bounties/2a3a13fe-2a9a-4d1a-8814-fd8ed1e3b1d5), [Link 3](https://nvd.nist.gov/vuln/detail/CVE-2023-3822).