cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-21665,https://securityvulnerability.io/vulnerability/CVE-2024-21665,Pimcore Ecommerce Framework Bundle Improper Access Control allows unprivileged user to access back-office orders list,ecommerce-framework-bundle is the Pimcore Ecommerce Framework Bundle. An authenticated and unauthorized user can access the back-office orders list and be able to query over the information returned. Access control and permissions are not being enforced. This vulnerability has been patched in version 1.0.10.,pimcore,ecommerce-framework-bundle,4.3,MEDIUM,0.0005600000149570405,false,false,false,false,,false,false,2024-01-11T00:39:48.848Z,0