CVE-2023-5844: Pimcore Admin Classic Bundle

High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days.

Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0.

Affected products

• Pimcore Admin Classic Bundle: up to and including 1.1.4

Published 2023-10-30. Last modified 2026-06-17.