Security Advisory
CVE-2021-23405
8.3
HIGH
Vulnerability Description
This affects the package pimcore/pimcore before 10.0.7. This issue exists due to the absence of check on the storeId parameter in the method collectionsActionGet and groupsActionGet method within the ClassificationstoreController class.
Published Date
July 9, 2021
Official Source
NIST NVD Advisory