← Back

E Commerce Framework

e-commerce_framework

Vendor: Pimcore • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-21665
1Pimcore
1E Commerce Framework
Jun 17, 2026
Jan 11, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Access control and p...Show more
ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Access control and permissions are not being enforced. This vulnerability has been patched in version 1.0.10.Show less