CVE-2024-21665

Summary

CVE-2024-21665 is a vulnerability affecting the Pimcore Ecommerce Framework Bundle, identified as 'ecommerce-framework-bundle'. This issue allows both authenticated and unauthorized users to access the back-office orders list, bypassing essential access control and permissions. The information returned from the affected system can be queried, posing a significant risk to data privacy and security. The vulnerability has been addressed in version 1.0.10 of the bundle through a patch.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.