Lucene search

CVE-2021-41144

🗓️ 27 Jan 2023 19:09:15Reported by [email protected]Type

OpenMage LTS e-commerce platform bypasses block blacklist to execute remote cod

Reporter	Title	Published	Views	Family All 8
OSV	CVE-2021-41144	27 Jan 202319:15	–	osv
OSV	Fix for authenticated remote code execution through layout update	27 Jan 202300:56	–	osv
Veracode	Remote Code Execution (RCE)	2 Feb 202304:51	–	veracode
Github Security Blog	Fix for authenticated remote code execution through layout update	27 Jan 202300:56	–	github
Vulnrichment	CVE-2021-41144 OpenMage LTS authenticated remote code execution through layout update	27 Jan 202318:08	–	vulnrichment
Prion	Design/Logic Flaw	27 Jan 202319:15	–	prion
CVE	CVE-2021-41144	27 Jan 202319:15	–	cve
Cvelist	CVE-2021-41144 OpenMage LTS authenticated remote code execution through layout update	27 Jan 202318:08	–	cvelist

Nvd

Node

openmage magentoRange<19.4.22lts

openmage magentoRange20.0.0–20.0.19lts

Source	Link
github	www.github.com/OpenMage/magento-lts/commit/06c45940ba3256cdfc9feea12a3c0ca56d23acf8
github	www.github.com/OpenMage/magento-lts/security/advisories/GHSA-5j2g-3ph4-rgvm
github	www.github.com/OpenMage/magento-lts/releases/tag/v19.4.22
github	www.github.com/OpenMage/magento-lts/releases/tag/v20.0.19

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jan 2023 19:15Current

8.8High risk

Vulners AI Score8.8

CVSS38.8

EPSS0.00139

CWE-77