Patchfirst
Patchfirst
Chainpimcore/pimcorePackagist:pimcore/pimcore

pimcore/pimcore: successive fixes (2019–2022)

7 CVEs over 3 generations, 4 Apr 2019 to 12 Feb 2022.

Family tree

Left to right by publication date.Oldest first. Select a CVE to open it.
  1. CVE-2019-108674 Apr 2019 First in the chain
  2. CVE-2022-026218 Jan 2022 No direct link to an earlier CVE
  3. CVE-2022-026318 Jan 2022 related to CVE-2022-0262
  4. CVE-2022-034827 Jan 2022 related to CVE-2019-10867
  5. CVE-2022-05098 Feb 2022 next fix after CVE-2022-0348
  6. CVE-2022-05108 Feb 2022 related to CVE-2022-0348related to CVE-2019-10867
  7. CVE-2022-056512 Feb 2022 related to CVE-2022-0262related to CVE-2022-0263and 1 more
Apr 2019Apr 2020Jan 2022 CVE-2022-0348 → CVE-2022-0510: related (high confidence)CVE-2019-10867 → CVE-2022-0348: related (medium confidence)CVE-2019-10867 → CVE-2022-0510: related (medium confidence)CVE-2022-0262 → CVE-2022-0263: related (medium confidence)CVE-2022-0262 → CVE-2022-0565: related (medium confidence)CVE-2022-0263 → CVE-2022-0565: related (medium confidence)CVE-2022-0348 → CVE-2022-0509: Next fix in the same package (medium confidence)CVE-2022-0348 → CVE-2022-0565: Next fix in the same package (medium confidence) CVE-2019-10867 4 Apr 2019 CVE-2022-0262 18 Jan 2022 CVE-2022-0263 18 Jan 2022 CVE-2022-0348 27 Jan 2022 CVE-2022-0509 8 Feb 2022 CVE-2022-0510 8 Feb 2022 CVE-2022-0565 12 Feb 2022 Apr 2019Jan 2020OctJan 2022 CVE-2022-0348 → CVE-2022-0510: related (high confidence)CVE-2019-10867 → CVE-2022-0348: related (medium confidence)CVE-2019-10867 → CVE-2022-0510: related (medium confidence)CVE-2022-0262 → CVE-2022-0263: related (medium confidence)CVE-2022-0262 → CVE-2022-0565: related (medium confidence)CVE-2022-0263 → CVE-2022-0565: related (medium confidence)CVE-2022-0348 → CVE-2022-0509: Next fix in the same package (medium confidence)CVE-2022-0348 → CVE-2022-0565: Next fix in the same package (medium confidence) CVE-2019-10867 4 Apr 2019 CVE-2022-0262 18 Jan 2022 CVE-2022-0263 18 Jan 2022 CVE-2022-0348 27 Jan 2022 CVE-2022-0509 8 Feb 2022 CVE-2022-0510 8 Feb 2022 CVE-2022-0565 12 Feb 2022
Exploited in the wild (CISA KEV) Not in KEV Priority score (0 to 100) High confidence Medium Low

CVEs in this family

Table view of the tree
CVEPublishedTitleLinked fromPriority
CVE-2019-10867 4 Apr 2019 An issue was discovered in Pimcore before 5.7.1 · fixed in 5.7.1 First in chain 24.9
CVE-2022-0262 18 Jan 2022 Cross-site Scripting (XSS) - Stored in pimcore/pimcore · fixed in 10.2.7 First in chain 19.6
CVE-2022-0263 18 Jan 2022 Unrestricted Upload of File with Dangerous Type in pimcore/pimcore · fixed in 10.2.7 CVE-2022-0262 · related · Medium 17.8
CVE-2022-0348 27 Jan 2022 Cross-site Scripting (XSS) - Stored in pimcore/pimcore · fixed in 10.2.10 CVE-2019-10867 · related · Medium 12.9
CVE-2022-0509 8 Feb 2022 Cross-site Scripting (XSS) - Stored in pimcore/pimcore · fixed in 10.3.1 CVE-2022-0348 · Next fix in the same package · Medium 19.2
CVE-2022-0510 8 Feb 2022 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore · fixed in 10.3.1 CVE-2022-0348 · related · High 12.9
CVE-2022-0565 12 Feb 2022 Cross-site Scripting in pimcore/pimcore · fixed in 10.3.1 CVE-2022-0262 · related · Medium 17.7
↑ ↓ chooseEnter openEsc close