CVE-2021-39189
Description
Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually.
Related CPE's
Could not find any relations
References
CvssV3 impact
Version | 3.1 |
VectorString | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
AttackVector | NETWORK |
AttackComplexity | LOW |
PrivilegesRequired | NONE |
UserInteraction | NONE |
Scope | UNCHANGED |
ConfidentialityImpact | LOW |
IntegrityImpact | NONE |
AvailabilityImpact | NONE |
BaseScore | 5.3 |
BaseSeverity | MEDIUM |
CvssV2 impact
Could not find any metrics