Description

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to `/admin/index/statistics` with a logged in Pimcore user exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the system. This vulnerability is fixed in 1.5.2, 1.4.6, and 1.3.10.

INFO

Published Date :

2024-07-30T14:43:14.407Z

Last Modified :

2024-08-02T04:46:52.472Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-41109 vulnerability.

Vendors Products
Pimcore
  • Admin Classic Bundle
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-41109.

URL Resource
https://github.com/pimcore/admin-ui-classic-bundle/blob/1.x/src/Controller/Admin/IndexController.php#L125C24-L125C40 cve-icon cve-icon cve-icon
https://github.com/pimcore/admin-ui-classic-bundle/commit/afa10bff2f8bfe9c8af7b6b75885bc403f6984f0 cve-icon cve-icon cve-icon
https://github.com/pimcore/admin-ui-classic-bundle/releases/tag/v1.5.2 cve-icon cve-icon cve-icon
https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-fx6j-9pp6-ph36 cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact