Executive brief
Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
Affected products
- Packagist pimcore/customer-management-framework-bundle
Junglewise Threat Intelligence
CVE-2024-21667: Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts
CVE-2024-21667 · Severity: low · CVSS 3.1 · Published 2024-01-10
Technologies: pimcore/customer-management-framework-bundle (Packagist). Vendors: Packagist.
Related threats
- pimcore/customer-data-framework vulnerable to SQL Injection
- Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list
- pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name
- Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller
- Pimcore customers' list user password hash is disclosed