Please do not report security vulnerabilities here.
Use our central security reporting process: Platform Version Vulnerabilities
This repository was archived by the owner on Aug 13, 2026. It is now read-only.
Security: pimcore/admin-ui-classic-bundle
Security
SECURITY.md
-
HTML InjectionGHSA-x82r-6j37-vrgg published
Apr 8, 2025 byLow -
User enumerationGHSA-vr5f-php7-rg24 published
Feb 7, 2025 byModerate -
Disclosed system and database information behind /admin firewallGHSA-fx6j-9pp6-ph36 published
Jul 30, 2024 byModerate -
Vulnerable jQuery Version 3.4.1GHSA-jmh9-6rjq-gjh9 published
Jun 4, 2024 byModerate -
Pimcore Host Header Injection in user invitation linkGHSA-3qpq-6w89-f7mx published
Feb 19, 2024 byHigh -
Permissions are not getting checked when working with tagsGHSA-3rfr-mpfj-2jwq published
Feb 7, 2024 byHigh -
SQL Injection in Admin download files as zipGHSA-cwx6-4wmf-c6xv published
Jan 24, 2024 byHigh -
Host header injection in the password resetGHSA-mrqg-mwh7-q94j published
Jan 24, 2024 byHigh -
Two Factor Authentication disabled for non admin security firewallsGHSA-9wwg-r3c7-4vfg published
Nov 27, 2023 by dvesh3High -
Full Path Disclosure via re-export documentGHSA-c8hj-w239-5gvf published
Nov 15, 2023 by dvesh3Moderate
Learn more about advisories related to pimcore/admin-ui-classic-bundle in the GitHub Advisory Database