{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-22T21:22:13.679","vulnerabilities":[{"cve":{"id":"CVE-2024-24822","sourceIdentifier":"security-advisories@github.com","published":"2024-02-07T18:15:54.147","lastModified":"2026-06-17T07:14:57.413","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Pimcore's Admin Classic Bundle provides a backend user interface for Pimcore. Prior to version 1.3.3, an attacker can create, delete etc. tags without having the permission to do so. A fix is available in version 1.3.3. As a workaround, one may apply the patch manually."},{"lang":"es","value":"El paquete Admin Classic de Pimcore proporciona una interfaz de usuario backend para Pimcore. Antes de la versión 1.3.3, un atacante podía crear, eliminar, etc. etiquetas sin tener permiso para hacerlo. Hay una solución disponible en la versión 1.3.3. Como workaround, se puede aplicar el parche manualmente."}],"affected":[{"source":"security-advisories@github.com","affectedData":[{"vendor":"pimcore","product":"admin-ui-classic-bundle","versions":[{"version":"< 1.3.3","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-advisories@github.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","baseScore":9.1,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.2}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2024-11-07T20:21:11.789646Z","id":"CVE-2024-24822","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"security-advisories@github.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:pimcore:admin_classic_bundle:*:*:*:*:*:pimcore:*:*","versionEndExcluding":"1.3.3","matchCriteriaId":"23018350-7CBD-4A0F-8FC3-7591E52971B0"}]}]}],"references":[{"url":"https://github.com/pimcore/admin-ui-classic-bundle/commit/24660b6d5ad9cbcb037a48d4309a6024e9adf251","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/pimcore/admin-ui-classic-bundle/pull/412","source":"security-advisories@github.com","tags":["Patch"]},{"url":"https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-3rfr-mpfj-2jwq","source":"security-advisories@github.com","tags":["Vendor Advisory"]},{"url":"https://github.com/pimcore/admin-ui-classic-bundle/commit/24660b6d5ad9cbcb037a48d4309a6024e9adf251","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/pimcore/admin-ui-classic-bundle/pull/412","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://github.com/pimcore/admin-ui-classic-bundle/security/advisories/GHSA-3rfr-mpfj-2jwq","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}