Composer pimcore/customer-management-framework-bundle has 9 known advisories in the phpwarden feed. Feed 2026.10.28.3, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2023-2756 | pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query | high | 7.2 | <3.3.10 | 3.3.10 |
| CVE-2024-11956 | pimcore/customer-data-framework vulnerable to SQL Injection | high | 7.2 | <4.2.1 | 4.2.1 |
| CVE-2023-32075 | Pimcore vulnerable to Business Logic Errors via Customer automation rules | medium | 4.3 | <3.3.9 | 3.3.9 |
| CVE-2023-4145 | pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name | medium | 6.5 | <3.4.2 | 3.4.2 |
| CVE-2024-21667 | Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access GDPR extracts | medium | 6.5 | <4.0.6 | 4.0.6 |
| CVE-2024-21666 | Pimcore Customer Data Framework Improper Access Control allows unprivileged user to access customers duplicates list | medium | 6.5 | <4.0.6 | 4.0.6 |
| CVE-2023-2881 | Pimcore customers' list user password hash is disclosed | medium | 6.7 | <3.3.10 | 3.3.10 |
| CVE-2023-3574 | Pimcore Customer Management Framework vulnerable to Improper Authorization in Rules Controller | medium | 6.5 | <3.4.1 | 3.4.1 |
| CVE-2023-2629 | Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection | high | 7.8 | <3.3.9 | 3.3.9 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked