What is GHSA-65p8-5423-fw3x?

GHSA-65p8-5423-fw3x is a security advisory published by GitHub Security Advisories with Medium severity. Pimcore XSS Vulnerability

Which CVE IDs does GHSA-65p8-5423-fw3x cover?

GHSA-65p8-5423-fw3x covers the following CVE IDs: CVE-2019-18656. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-65p8-5423-fw3x?

GHSA-65p8-5423-fw3x has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-65p8-5423-fw3x?

GHSA-65p8-5423-fw3x affects 1 product, including: composer/pimcore/pimcore:\u003c 6.3.0.

GHSA-65p8-5423-fw3xMediumCVSS 6.1

Pimcore XSS Vulnerability

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

September 26, 2023

🔗 CVE IDs covered (1)

CVE-2019-18656 →

📋 Description

Pimcore 6prior to 6.3.0 has XSS in the translations grid because bundles/AdminBundle/Resources/public/js/pimcore/settings/translations.js mishandles certain HTML elements.

🎯 Affected products1

composer/pimcore/pimcore:< 6.3.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2019-18656
https://github.com/pimcore/pimcore/commit/ca036e9f86bb5cdb3dac0930ec131e5f35e26c5f
https://github.com/advisories/GHSA-65p8-5423-fw3x