Skip to content
CVE PROGRAM SOURCE RECORD7.7 High

CVE-2020-26246

Authorization bypass in Pimcore

Description

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website settings without having the appropriate permissions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pimcore pimcore

  • < 6.8.5affected

References