2 matches found
GHSA-JRGF-VFW2-HJ26 RCE via PHP Object injection via SOAP Requests
Impact This vulnerability allows an admin user to generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product. Patches The latest OpenMage Versions up from 19.4.7 and 20.0.3 have this Issue solved Credits Credit to Luke Rodgers for...
8CVSS7.4AI score0.01264EPSS
SaveExploits0References4
RCE via PHP Object injection via SOAP Requests
Impact This vulnerability allows an admin user to generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product. Patches The latest OpenMage Versions up from 19.4.7 and 20.0.3 have this Issue solved Credits Credit to Luke Rodgers for...
8CVSS4.1AI score0.01264EPSS
SaveExploits0References5Affected Software1
20