CVE-2024-24822 — Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to d…
Published: 2024-02-07 · CVSS: 6.5 · CVSS 3.1
Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to do so. A fix is available in version 1.3.3. As a workaround, one may apply the patch manually.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7