admin/cve
1
0
Fork 0
mirror of https://github.com/0xMarcio/cve.git synced 2025-05-06 02:31:38 +00:00
Code Issues Packages Projects Releases Wiki Activity
cve/2024/CVE-2024-41109.md
0xMarcio 3e58935392 Update CVE sources 2024-08-10 19:04
2024-08-10 19:04:30 +00:00

994 B
Raw Permalink Blame History

CVE-2024-41109

Description

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to /admin/index/statistics with a logged in Pimcore user exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the system. This vulnerability is fixed in 1.5.2, 1.4.6, and 1.3.10.

POC

Reference

Github

No PoCs found on GitHub currently.