What is the CVSS score of CVE-2023-25240?

CVE-2023-25240 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 1.0%.

Is there a public PoC exploit available for CVE-2023-25240?

Yes, a public proof-of-concept exploit is available for CVE-2023-25240. Prioritise patching immediately. EPSS: 1.0%.

Is there a patch available for CVE-2023-25240?

Yes, a patch is available for CVE-2023-25240. Update the affected software to the latest version immediately.

Pimcore CVE-2023-25240

HIGH

Unintended Reentrant Invocation of Non-reentrant Code Via Nested Calls (CWE-1265)

2023-02-13 cve@mitre.org

RCE Pimcore

8.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

Feb 13, 2023 - 21:15 nvd

HIGH 8.8

DescriptionNVD

An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code.

AnalysisAI

An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-1265. An improper SameSite Attribute vulnerability in pimCore v10.5.15 allows attackers to execute arbitrary code. Affected products include: Pimcore.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Pimcore

View all

CVE-2019-10867 HIGH Act Now POC

8.8 Apr 04

An issue was discovered in Pimcore before 5.7.1. Rated high severity (CVSS 8.8), this vulnerability is remotely exploita

CVE-2021-4139 CRITICAL Act Now POC

9.0 Dec 21

pimcore is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'). Rated cri

CVE-2026-23492 HIGH This Week POC

8.8 Jan 14

Blind SQL injection in Pimcore's Admin Search Find API allows authenticated attackers to extract database information th

CVE-2023-47637 HIGH This Week POC

8.8 Nov 15

Pimcore is an Open Source Data & Experience Management Platform. Rated high severity (CVSS 8.8), this vulnerability is r

CVE-2023-2984 HIGH This Week POC

8.8 May 30

Path Traversal: '\..\filename' in GitHub repository pimcore/pimcore prior to 10.5.22. Rated high severity (CVSS 8.8), th

CVE-2023-2983 HIGH This Week POC

8.8 May 30

Privilege Defined With Unsafe Actions in GitHub repository pimcore/pimcore prior to 10.5.23. Rated high severity (CVSS 8

CVE-2023-2338 HIGH This Week POC

8.8 Apr 27

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.21. Rated high severity (CVSS 8.8), this vulnerability

CVE-2023-1578 HIGH This Week POC

8.8 Mar 22

SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19. Rated high severity (CVSS 8.8), this vulnerability

CVE-2021-23405 HIGH This Week POC

8.8 Jul 09

This affects the package pimcore/pimcore before 10.0.7. Rated high severity (CVSS 8.8), this vulnerability is remotely e

CVE-2018-14057 HIGH This Week POC

8.8 Aug 17

Pimcore before 5.3.0 allows remote attackers to conduct cross-site request forgery (CSRF) attacks by leveraging validati

CVE-2024-49370 HIGH This Week POC

8.7 Oct 23

Pimcore is an open source data and experience management platform. Rated high severity (CVSS 8.7), this vulnerability is

CVE-2022-31092 HIGH This Week POC

8.1 Jun 27

Pimcore is an Open Source Data & Experience Management Platform. Rated high severity (CVSS 8.1), this vulnerability is r

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2025-53770 CRITICAL POC

9.8

CVE-2020-7961 CRITICAL POC

9.8

CVE-2023-25240 vulnerability details – vuln.today

Back

Pimcore CVE-2023-25240

Severity by source

CVSS VectorNVD

Lifecycle Timeline

DescriptionNVD

AnalysisAI

Technical ContextAI

RemediationAI

More in Pimcore

Same technique RCE

Share

External POC / Exploit Code