GHSA-7pxg-6p87-8c9v

ghsaUSosv

Magento 2 Community Edition RCE via Unsafe File Upload

Advisory ansehen veröffentlicht 2022-05-24Lizenz: CC-BY-4.0

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2020-24407US	critical9.1	5.27% (93rd)	—	2020-11-09
Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abus…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/magento/magento2PACKAGE
https://helpx.adobe.com/security/products/magento/apsb20-59.htmlWEB
https://nvd.nist.gov/vuln/detail/CVE-2020-24407ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan