CVE Catalog
CVE-2023-3574
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.44%
35th percentile - higher than 35% of all known CVEs
Summary
Improper authorization exists in the GitHub repository pimcore/customer-data-framework prior to version 3.4.1.
Risk Assessment
Improper authorization may lead to unauthorized access to user data, posing a significant security risk to the organization.
Recommendation
It is recommended to upgrade to version 3.4.1 or later to mitigate this vulnerability.
Other vulnerabilities in pimcore/customer-data-framework
Original NVD description (English source)
Improper Authorization in GitHub repository pimcore/customer-data-framework prior to 3.4.1.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS