Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

admin-ui-classic-bundle — Vulnerabilities & Security Advisories 12

All 12 CVE vulnerabilities found in admin-ui-classic-bundle, with AI-generated Chinese analysis, references, and POCs.

Vendor: pimcore

CVE IDTitleCVSSSeverityPublished
CVE-2025-30166 Pimcore's Admin Classic Bundle allows HTML Injection CWE-79 5.4AIMediumAI2025-04-08
CVE-2025-24980 Pimcore Admin Classic Bundle allows user enumeration CWE-204 5.3 -2025-02-07
CVE-2024-41109 Pimcore vulnerable to disclosure of system and database information behind /admin firewall CWE-200 6.3 Medium2024-07-30
CVE-2024-25625 Pimcore Host Header Injection in user invitation link CWE-74 8.1 High2024-02-19
CVE-2024-24822 Pimcore Admin Classic Bundle permissions are not getting checked when working with tags CWE-862 6.5 Medium2024-02-07
CVE-2024-23646 Pimcore Admin Classic Bundle SQL Injection in Admin download files as zip CWE-89 8.8 High2024-01-24
CVE-2024-23648 Pimcore Admin Classic Bundle host header injection in the password reset CWE-74 8.8 High2024-01-24
CVE-2023-49075 Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls CWE-308 8.5 High2023-11-28
CVE-2023-47636 Full Path Disclosure via re-export document in pimcore/admin-ui-classic-bundle CWE-209 5.3 Medium2023-11-15
CVE-2023-46722 Pimcore Admin Classic Bundle Cross-site Scripting (XSS) in PDF previews CWE-80 6.1 Medium2023-10-31
CVE-2023-42817 Cross-site Scripting (XSS) in pimcore admin-ui-classic-bundle translations CWE-79 5.4 Medium2023-09-25
CVE-2023-37280 Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup page CWE-79 5.0 Medium2023-07-11

All 12 known CVE vulnerabilities affecting admin-ui-classic-bundle with full Chinese analysis, references, and POCs where available.