UpHeron
All vulnerabilities

Servers and applications

CVE-2021-23405

This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.

Severity
High 8.8
Published
9 Jul 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
10.0.7
Sources
NVD

Affected software

SoftwareAffected versions
PimcoreServers and applications · cpe:a:pimcore:pimcore
  • Every version before 10.0.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-23405
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-23405