Packagist (Composer) package
akeneo/pim-community-dev
pkg:composer/akeneo/pim-community-dev
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2022-46157 | — | >= 6.0.0, < 6.0.53 | 6.0.53 | Dec 9, 2022 | Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Community Edition after the | ||
| CVE-2017-1000009 | Cri | 9.8 | >= 1.4, < 1.4.28 | 1.4.28 | Jul 17, 2017 | Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution. |
- CVE-2022-46157Dec 9, 2022affected >= 6.0.0, < 6.0.53fixed 6.0.53
Akeneo PIM is an open source Product Information Management (PIM). Akeneo PIM Community Edition versions before v5.0.119 and v6.0.53 allows remote authenticated users to execute arbitrary PHP code on the server by uploading a crafted image. Akeneo PIM Community Edition after the
- affected >= 1.4, < 1.4.28fixed 1.4.28
Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.