updated pimcore advisory with CVE