CVE-2021-39166: Cross-site Scripting

September 1, 2021 (updated September 9, 2021)

Text-values were not properly escaped before printed in the version preview. This allowed XSS by authenticated users with access to the resources. This issue is patched in Pimcore

References

nvd.nist.gov/vuln/detail/CVE-2021-39166

Detect and mitigate CVE-2021-39166 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →