CVE-2014-2922

Published: Apr 21, 2014Modified: May 6, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:P

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The getObjectByToken function in Newsletter.php in the Pimcore_Tool_Newsletter module in pimcore 1.4.9 through 2.1.0 does not properly handle an object obtained by unserializing a pathname, which allows remote attackers to conduct PHP object injection attacks and delete arbitrary files via vectors involving a Zend_Http_Response_Stream object.

Affected (3)

Products: Pimcore: Pimcore

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Pimcore Pimcore	Version 1.4.9
Pimcore Pimcore	Version 1.5.0
Pimcore Pimcore	Version 2.1.0

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (6)

http://openwall.com/lists/oss-security/2014/04/21/1

Source: cve@mitre.org

http://www.pimcore.org/en/resources/blog/pimcore+2.2+released_b442

Source: cve@mitre.org

Vendor Advisory

https://github.com/pedrib/PoC/blob/master/pimcore-2.1.0.txt

Source: cve@mitre.org

Exploit

http://openwall.com/lists/oss-security/2014/04/21/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.pimcore.org/en/resources/blog/pimcore+2.2+released_b442

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://github.com/pedrib/PoC/blob/master/pimcore-2.1.0.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.