CVE-2021-32684

🗓️ 14 Jun 2021 23:05:09Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 67 Views

magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec, and logs commands, effectively making them unusable. Version 1.5.3 contains patches for the problems

Reporter	Title	Published	Views	Family All 8
CNNVD	Adobe Magento App 安全漏洞	14 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-32684 Missing Handler in @scandipwa/magento-scripts	14 Jun 202123:05	–	cvelist
EUVD	EUVD-2021-1262	7 Oct 202500:30	–	euvd
Github Security Blog	Missing Handler in @scandipwa/magento-scripts	21 Jun 202117:10	–	github
NVD	CVE-2021-32684	14 Jun 202123:15	–	nvd
OSV	GHSA-52QP-GWWH-QRG4 Missing Handler in @scandipwa/magento-scripts	21 Jun 202117:10	–	osv
Prion	Design/Logic Flaw	14 Jun 202123:15	–	prion
RedhatCVE	CVE-2021-32684	22 May 202521:18	–	redhatcve

NVD

Vulners

Node

scandipwa magento-scriptsMatch1.5.1node.js

scandipwa magento-scriptsMatch1.5.2node.js

[
  {
    "product": "create-magento-app",
    "vendor": "scandipwa",
    "versions": [
      {
        "status": "affected",
        "version": ">= 1.5.1, <= 1.5.2"
      }
    ]
  }
]

Source	Link
github	www.github.com/scandipwa/create-magento-app/commit/89115db7031e181eb8fb4ec2822bc6cab88e7071
github	www.github.com/scandipwa/create-magento-app/security/advisories/GHSA-52qp-gwwh-qrg4

21 Nov 2024 06:07Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25

CVSS 3.15.5 - 6.2

EPSS0.00189

CWE-670