← All advisories

Critical severity9.8NVD Advisory· Published Nov 15, 2019· Updated Jun 17, 2026

CVE-2019-18981

CVE-2019-18981

Description

Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
pimcore/pimcorePackagist	< 6.2.2	6.2.2

Affected products

2

Pimcore/Pimcore
cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*
Range: <6.2.2
ghsa-coords
pkg:composer/pimcore/pimcore
Range: < 6.2.2

Patches

Vulnerability mechanics

References

4

github.com/pimcore/pimcore/commit/0a5d80b2593b2ebe35d19756b730ba33aa049106nvdPatchThird Party AdvisoryWEB
github.com/pimcore/pimcore/compare/v6.2.1...v6.2.2nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-jhcf-j4hg-v64rghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-18981ghsaADVISORY

News mentions

0

No linked articles in our index yet.