VulertSecurity VulertSecurity

Vulnerability Database · Packagist · pimcore/customer-management-framework-bundle · Version

pimcore/customer-management-framework-bundle v1.14.0

v1.14.0 is affected by 11 vulnerabilities.

The vulnerabilities that cover this exact version are listed below with the fixed version to move to.

Critical 0 High 3 Medium 8 Low 0 Unrated 0

All pimcore/customer-management-framework-bundle versions & vulnerabilities → Search the database for this package →
Database updated 23/Oct/2026

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Vulnerabilities affecting this version

pimcore/customer-management-framework-bundle v1.14.0 vulnerabilities

11 vulnerabilities cover pimcore/customer-management-framework-bundle v1.14.0. Scroll the table for all of them, or open the full list in the database.

Vulnerability Severity Fixed version Disclosed
CVE-2023-2629: Formula Injection/CSV Injection in pimcore/customer-management-framework-bundle 7.8 high 3.3.9 11 May 2023
CVE-2024-11956: SQL Injection Vulnerability in Pimcore Customer Management Framework 7.2 medium 4.2.1 28 Jan 2025
CVE-2023-27561: Opencontainers runc Incorrect Authorization vulnerability 7.2 high 3.3.10 17 May 2023
CVE-2023-2756: SQL Injection vulnerability in pimcore/customer-management-framework-bundle 7.2 high 3.3.10 17 May 2023
CVE-2023-28819: Stored cross site scripting in Concrete CMS 6.7 medium 3.3.10 25 May 2023
CVE-2023-2881: Pimcore customer-management-framework-bundle - Pimcore customers' list user password hash is disclosed 6.7 medium 3.3.10 25 May 2023
CVE-2024-21667: Pimcore Customer Data Framework Improper Access Control 6.5 medium 4.0.6 10 Jan 2024
CVE-2024-21666: Pimcore Customer Data Framework Improper Access Control 6.5 medium 4.0.6 10 Jan 2024
CVE-2023-4145: Cross-site Scripting vulnerability in pimcore/customer-management-framework-bundle 6.5 medium 3.4.2 03 Aug 2023
CVE-2023-3574: Pimcore Customer Management Framework Bundle Improper Authorization in Rules Controller 6.5 medium 3.4.1 10 Jul 2023
CVE-2023-32075: Pimcore vulnerable to Business Logic Errors via Customer automation rules 4.3 medium 3.3.9 11 May 2023

Looking for another version, or everything Vulert holds for pimcore/customer-management-framework-bundle?

All versions → Full vulnerability list →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About pimcore/customer-management-framework-bundle v1.14.0

Is pimcore/customer-management-framework-bundle v1.14.0 vulnerable?

Yes. 11 vulnerabilities in the Vulert database cover pimcore/customer-management-framework-bundle v1.14.0: 0 critical, 3 high, 8 medium and 0 low. Each entry above names the fixed version to move to.

How do I monitor pimcore/customer-management-framework-bundle for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the pimcore/customer-management-framework-bundle version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.