Pimcore before 6.2.2 lacks an Access Denied outcome for a certain scenario of an incorrect recipient ID of a notification.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-18981.json"