Remote Code Execution (RCE)

2021-08-3005:36:03

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

remote code execution

data flow sanitization

admin users

executable files

server vulnerability

software

EPSS

0.002

Percentile

54.1%

JSON

openmage/magento-lts is vulnerable to remote code execution. Lack of data flow sanitization allows admin users to upload malicious executable files to the server.

References

github.com/OpenMage/magento-lts/commit/34709ac642d554aa1824892059186dd329db744b

github.com/OpenMage/magento-lts/releases/tag/v19.4.15

github.com/OpenMage/magento-lts/releases/tag/v20.0.13

github.com/OpenMage/magento-lts/security/advisories/GHSA-xm9f-vxmx-4m58

EPSS

0.002

Percentile

54.1%

JSON

Related for VERACODE:31869