9 matches found
CVE-2021-39217 OpenMage LTS arbitrary command execution in custom layout update through blocks
OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.22 and 20.0.19 contain patches for this issue...
CVE-2021-39217
OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.22 and 20.0.19 contain patches for this issue...
GHSA-C9Q3-R4RV-MJM7 Fix for arbitrary command execution in custom layout update through blocks
Impact Custom Layout enabled admin users to execute arbitrary commands via block methods...
Fix for arbitrary command execution in custom layout update through blocks
Impact Custom Layout enabled admin users to execute arbitrary commands via block methods...
CVE-2021-39217: Improper Neutralization of Special Elements used in a Command
OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.22 and 20.0.19 contain patches for this issue...
GHSA-26RR-V2J2-25FH Layout XML Arbitrary Code Fix
Impact Layout XML enabled admin users to execute arbitrary commands via block methods...
Layout XML Arbitrary Code Fix
Impact Layout XML enabled admin users to execute arbitrary commands via block methods...
CVE-2021-32758
OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin users to execute arbitrary commands via block methods. The latest OpenMage Versions up from v19.4.15 and v20.0.11 have this Issue patched...
PT-2021-19910
Name of the Vulnerable Software and Affected Versions OpenMage Magento LTS versions prior to 19.4.15 OpenMage Magento LTS versions prior to 20.0.11 Description The issue allows admin users to execute arbitrary commands via block methods when layout XML is enabled. This can be exploited by admin...