CVE-2023-49076

Summary

CVE-2023-49076 is a vulnerability affecting Pimcore's customer-data-framework. The framework, used for managing customer data within Pimcore, lacks protection against Cross-Site Request Forgery (CSRF) attacks. An attacker can exploit this weakness to create new customer accounts without proper authorization. This security issue has been rectified in version 4.0.5 of Pimcore.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.