Pimcore Data-Importer vulnerabilities

1 known vulnerability affecting pimcore/data-importer.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2024-45048MEDIUMCVSS 6.5≥ 0, < 1.8.9≥ 1.9.0, < 1.9.32024-09-03

CVE-2024-45048 [MEDIUM] Pimcore includes vulnerable PHPOffice/PhpSpreadsheet Pimcore includes vulnerable PHPOffice/PhpSpreadsheet ### Summary Pimcore 10.6.x and Enterprise 10.6.x versions currently depend on PHPOffice/PhpSpreadsheet version 1.x, which has recently been identified with a security vulnerability (CVE-2024-45048). To mitigate this issue, it is recommended to update to the latest version 2.2.2. For more details, please refer to the official advisory: [GHSA-ghg6-32f9-2jp7](https://gi