漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Pimcore Web2Print Tools Bundle "Favourite Output Channel Configuration" Missing Function Level Authorization
Vulnerability Description
Pimcore Web2Print Tools Bundle adds tools for web-to-print use cases to Pimcore. Prior to 5.2.2 and 6.1.1, the application fails to enforce proper server-side authorization checks on the API endpoint responsible for managing "Favourite Output Channel Configurations." Testing revealed that an authenticated backend user without explicitely lacking permissions for this feature was still able to successfully invoke the endpoint and modify or retrieve these configurations. This vulnerability is fixed in 5.2.2 and 6.1.1.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Vulnerability Type
访问控制不恰当
Vulnerability Title
Web2Print Tools Bundle for Pimcore 安全漏洞
Vulnerability Description
Web2Print Tools Bundle for Pimcore是Pimcore开源的一个扩展套件。 Web2Print Tools Bundle for Pimcore 5.2.2之前版本和6.1.1之前版本存在安全漏洞，该漏洞源于API端点缺少服务器端授权检查，可能导致收藏输出通道配置被修改或泄露。
CVSS Information
N/A
Vulnerability Type
N/A