Vulnerability · Published Jul 30, 2024 · Assigned by GitHub_M

CVE-2024-41109Pimcore vulnerable to disclosure of system and database information behind /admin firewall

Medium 6.3

In plain English

A medium-severity information exposure in admin-ui-classic-bundle from pimcore. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.5%top 58.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Navigating to `/admin/index/statistics` with a logged in Pimcore user exposes information about the Pimcore installation, PHP version, MYSQL version, installed bundles and all database tables and their row count in the system. This vulnerability is fixed in 1.5.2, 1.4.6, and 1.3.10.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	pimcore/admin-ui-classic-bundle	1.5.2	GHSA-fx6j-9pp6-ph36

Affected products (as reported)

Vendor	Product	Versions
pimcore	admin-ui-classic-bundle	< 1.5.2

Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

References

https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-fx6j-9pp6-ph36 x_refsource_CONFIRM
https://github.com/pimcore/admin-ui-classic-bundle/commit/afa10bff2f8bfe9c8af7b6b75885bc403f6984f0 x_refsource_MISC
https://github.com/pimcore/admin-ui-classic-bundle/blob/1.x/src/Controller/Admin/IndexController.php#L125C24-L125C40 x_refsource_MISC
https://github.com/pimcore/admin-ui-classic-bundle/releases/tag/v1.5.2 x_refsource_MISC