Admin-UI-Classic-Bundle
Pimcore · 12 CVEs
Pimcore's Admin Classic Bundle allows HTML Injection
Apr 8, 2025
Pimcore Admin Classic Bundle allows user enumeration
Feb 7, 2025
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Jul 30, 2024
Pimcore Host Header Injection in user invitation link
Feb 19, 2024
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Feb 7, 2024
Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip
Jan 24, 2024
Pimcore Admin Classic Bundle host header injection in the password reset
Jan 24, 2024
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
Nov 28, 2023
Full Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle
Nov 15, 2023
Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews
Oct 31, 2023
Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations
Sep 25, 2023
Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page
Jul 11, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2025-30166 | Pimcore's Admin Classic Bundle allows HTML Injection | LOW | 0.25% | Apr 8, 2025 |
| CVE-2025-24980 | Pimcore Admin Classic Bundle allows user enumeration | MEDIUM | 0.52% | Feb 7, 2025 |
| CVE-2024-41109 | Pimcore vulnerable to disclosure of system and database information behind /admin firewall | MEDIUM | 0.48% | Jul 30, 2024 |
| CVE-2024-25625 | Pimcore Host Header Injection in user invitation link | CRITICAL | 0.68% | Feb 19, 2024 |
| CVE-2024-24822 | Pimcore Admin Classic Bundle permissions are not getting checked when working with tags | CRITICAL | 0.54% | Feb 7, 2024 |
| CVE-2024-23646 | Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip | HIGH | 1.00% | Jan 24, 2024 |
| CVE-2024-23648 | Pimcore Admin Classic Bundle host header injection in the password reset | HIGH | 0.83% | Jan 24, 2024 |
| CVE-2023-49075 | Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls | HIGH | 1.44% | Nov 28, 2023 |
| CVE-2023-47636 | Full Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle | MEDIUM | 0.65% | Nov 15, 2023 |
| CVE-2023-46722 | Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews | MEDIUM | 0.50% | Oct 31, 2023 |
| CVE-2023-42817 | Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations | MEDIUM | 0.38% | Sep 25, 2023 |
| CVE-2023-37280 | Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page | MEDIUM | 0.58% | Jul 11, 2023 |
Showing 1 to 12 of 12 CVEs