What is GHSA-r2vq-p658-p274?

GHSA-r2vq-p658-p274 is a security advisory published by GitHub Security Advisories with High severity. SameSite Attribute vulnerability in pimCore

Which CVE IDs does GHSA-r2vq-p658-p274 cover?

GHSA-r2vq-p658-p274 covers the following CVE IDs: CVE-2023-25240. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-r2vq-p658-p274?

GHSA-r2vq-p658-p274 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

Which products are affected by GHSA-r2vq-p658-p274?

GHSA-r2vq-p658-p274 affects 1 product, including: composer/pimcore/pimcore:\u003c 10.5.16.

GHSA-r2vq-p658-p274HighCVSS 8.8

SameSite Attribute vulnerability in pimCore

Vendor

GitHub Security Advisories

Published

February 13, 2023

Last Modified

March 21, 2025

🔗 CVE IDs covered (1)

CVE-2023-25240 →

📋 Description

An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.

🎯 Affected products1

composer/pimcore/pimcore:< 10.5.16

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2023-25240
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pimcore/pimCore-10.5.15
https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions
https://github.com/advisories/GHSA-r2vq-p658-p274