CVE-2023-25240

Description

An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.

Affected Platforms

Weakness Type

NVD-CWE-Other, CWE-1265

References

• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pimcore/pimCo…
• https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions
• https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pimcore/pimCo…
• https://portswigger.net/web-security/csrf/bypassing-samesite-restrictions