How severe is CVE-2023-5192?

CVE-2023-5192 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability low.

Is CVE-2023-5192 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (52nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2023-5192?

CVE-2023-5192 affects Pimcore Core. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2023-5192?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2023-5192 published?

CVE-2023-5192 was published on 2023-09-27 and last updated on 2026-06-17.

CVE-2023-5192

CVE-2023-5192 is a medium-severity vulnerability in Pimcore Core with a CVSS 3.x base score of 6.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1049.

Key facts

Severity: Medium (CVSS 3.x base score 6.5)
EPSS exploit prediction: 1% (52nd percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-1049
Affected product: Pimcore Core
Published: 2023-09-27
Last modified: 2026-06-17

Description

Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0.

Frequently asked questions

What is CVE-2023-5192?: Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0.
How severe is CVE-2023-5192?: CVE-2023-5192 has a CVSS 3.x base score of 6.5, rated medium severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability low.
Is CVE-2023-5192 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (52nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2023-5192?: CVE-2023-5192 affects Pimcore Core. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2023-5192?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2023-5192 published?: CVE-2023-5192 was published on 2023-09-27 and last updated on 2026-06-17.

References

Affected products (1)

cpe:2.3:a:pimcore:core:*:*:*:*:*:*:*:*

Other CWE-1049 vulnerabilities

CVE-2025-0190 — High (CVSS 7.5): In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text`…
CVE-2019-8460 — High (CVSS 7.5): OpenBSD kernel version <= 6.5 can be forced to create long chains of TCP SACK holes that causes very expensive calls to…

Browse all CWE-1049 vulnerabilities →