cve/2021/CVE-2021-23405.md
2024-06-18 02:51:15 +02:00

749 B

CVE-2021-23405

Description

This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.

POC

Reference

Github

No PoCs found on GitHub currently.