Lucene search

K
osvGoogleOSV:GHSA-337C-3RCH-Q35J
HistoryMay 24, 2022 - 5:24 p.m.

Magento php object injection vulnerability

2022-05-2417:24:11
Google
osv.dev
2

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.1%

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a php object injection vulnerability. Successful exploitation could lead to arbitrary code execution.
A patch SUPEE-11346 is available at Magento Open Source Download Page > Release Archive Tab > Magento Open Source Patches - 1.x Section

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.1%

Related for OSV:GHSA-337C-3RCH-Q35J