Improper Authorization Pimcore Customer Data Framework <3.4.1
CVE-2023-3574 Published on July 10, 2023

Improper Authorization in pimcore/customer-data-framework
Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.

Github Repository NVD

A proof of concept, or POC exists for this vulnerability.

Vulnerability Analysis

Exploitation:
POC
Automatable:
NO
Technical Impact:
PARTIAL

Weakness Type

What is an AuthZ Vulnerability?

The software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

CVE-2023-3574 has been classified to as an AuthZ vulnerability or weakness.


Products Associated with CVE-2023-3574

stack.watch emails you whenever new vulnerabilities are published in Pimcore Customer Management Framework or Pimcore Customer Data Framework. Just hit a watch button to start following.

Pimcore Customer Management Framework
Pimcore Customer Data Framework

Affected Versions

pimcore/customer-data-framework: pimcore customer-data-framework:

Vulnerable Packages

The following package name and versions may be associated with CVE-2023-3574

Package Manager Vulnerable Package Versions Fixed In
composer pimcore/customer-management-framework-bundle < 3.4.1 3.4.1

Exploit Probability

EPSS
0.54%
Percentile
45.75%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.