Privilege Defined With Unsafe Actions in pimcore/pimcore

CVE-2023-2983

What is CVE-2023-2983?

The vulnerability discovered in Pimcore allows users to perform unsafe actions due to improperly defined privileges in versions prior to 10.5.23. This weakness can potentially be exploited by malicious actors to elevate their access rights, leading to unauthorized operations within the application. Proper measures should be taken to update to the latest version and mitigate any associated risks.

References