← Database

CVE-2021-39189

MEDIUM CVSS: 5.3 Published: 2021-09-15 Modified: 2026-06-17

Description

Pimcore is an open source data & experience management platform. In versions prior to 10.1.3, it is possible to enumerate usernames via the forgot password functionality. This issue is fixed in version 10.1.3. As a workaround, one may apply the available patch manually.

Affected Platforms

Pimcore Pimcore

Weakness Type

CWE-204, CWE-203

References