Lucene search

K
osvGoogleOSV:GHSA-7GPV-XRJR-F5H4
HistoryMay 24, 2022 - 7:06 p.m.

Magento Path Traversal vulnerability

2022-05-2419:06:24
Google
osv.dev
1

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.2%

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Path Traversal vulnerability when creating a store with child theme.Successful exploitation could lead to arbitrary file system write by an authenticated attacker. Access to the admin console is required for successful exploitation.

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.2%

Related for OSV:GHSA-7GPV-XRJR-F5H4