Security Advisory

CVE-2024-21665

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-01-11 00:39:48

Last updated 2025-06-17 21:09:16

Assigner GitHub_M

CVSS score 4.3

State PUBLISHED

Description

ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Access control and permissions are not being enforced. This vulnerability has been patched in version 1.0.10.

← Browse all CVEs View on cve.org ↗