CVE-2023-3574

MediumCVSS 6.5

Published: 10/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

35th percentile - higher than 35% of all known CVEs

Improper authorization exists in the GitHub repository pimcore/customer-data-framework prior to version 3.4.1.

Improper authorization may lead to unauthorized access to user data, posing a significant security risk to the organization.

It is recommended to upgrade to version 3.4.1 or later to mitigate this vulnerability.

Original NVD description (English source)

Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.