Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101205
HistoryAug 31, 2021 - 12:00 a.m.

OpenMage Magento LTS Input Validation Error Vulnerability (CNVD-2021-101205)

2021-08-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
7
openmage
magento
e-commerce
input validation
vulnerability
executable files
server

EPSS

0.002

Percentile

54.1%

OpenMage Magento Lts (Magento), an e-commerce system from the OpenMage organization, is vulnerable to an input validation error in versions prior to OpenMage Magento LTS 19.4.15 and 20.0.13, which can be exploited by attackers to upload arbitrary executable files to the server.

EPSS

0.002

Percentile

54.1%

Related for CNVD-2021-101205