VYPR

Pimcore

by Pimcore

Source repositories

CVEs (141)

  • CVE-2014-2921Apr 21, 2014
    risk 0.00cvss epss 0.07

    The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.0.0 does not properly handle an object obtained by unserializing Lucene search data, which allows remote attackers to conduct PHP object injection attacks and execute…

Page 8 of 8