CVE-2023-2881

CVE-2023-2881 is a medium-severity vulnerability (CVSS 4.9) in the pimcore/customer-data-framework, affecting versions prior to 3.3.10, where passwords are stored in a recoverable format. This flaw allows a highly privileged attacker to remotely access sensitive password data with low attack complexity, resulting in a high confidentiality impact. There is no indication of active exploitation, public exploit code (e.g., Metasploit, ExploitDB), or significant community discussion surrounding this vulnerability.