VYPR

Packagist (Composer) package

pimcore/ecommerce-framework-bundle

pkg:composer/pimcore/ecommerce-framework-bundle

Vulnerabilities (1)

  • CVE-2024-21665Jan 11, 2024
    affected < 1.0.10fixed 1.0.10

    ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Access control and permissions are not being enforced. This vulnerability has be