File and Path Handling

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. Directory traversal vulnerability in pimcore before build 3473 allows remote authenticated users with the "assets" permission to create or write to arbitrary files via a .. (dot d…CVE-2015-4425Pimcore · 3.8% likely

   CWE-22

2. Path Traversal in pimcore/pimcoreCVE-2022-0665pimcore · CVSS 4.9 · 1.5% likely

   CWE-22

3. In Pimcore before 5.7.1, an attacker with limited privileges can bypass file-extension restrictions via a 256-character filename, as demonstrated by the failure of automatic renam…CVE-2019-16318Pimcore · 1.4% likely

   CWE-434

4. Local File InclusionCVE-2021-23340Pimcore · CVSS 7.1 · 1.3% likely

   CWE-22

5. Unrestricted Upload of File with Dangerous Type in pimcore/pimcoreCVE-2022-0263pimcore · CVSS 6.6 · 1.2% likely

   CWE-434

6. Pimcore Arbitrary File Read in Admin JS CSS filesCVE-2023-30852pimcore · CVSS 4.4 · 1.0% likely

   CWE-22

7. Path Traversal: '\..\filename' in pimcore/pimcoreCVE-2023-2984pimcore · CVSS 6.3 · 0.9% likely

   CWE-29

8. Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.phpCVE-2023-30855pimcore · CVSS 6.5 · 0.8% likely

   CWE-22

9. Path Traversal in pimcore/pimcoreCVE-2023-2336pimcore · CVSS 5.5 · 0.7% likely

   CWE-22

10. Pimcore Path Traversal Vulnerability in AssetController:importServerFilesActionCVE-2023-38708pimcore · CVSS 6.3 · 0.6% likely

    CWE-22

11. Missing file upload type validation in pimcore/pimcoreCVE-2023-23937pimcore · CVSS 8.2 · 0.5% likely

    CWE-434

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.