Описание
RCE via PHP Object injection via SOAP Requests
Impact
This vulnerability allows an admin user to generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product.
Patches
The latest OpenMage Versions up from 19.4.7 and 20.0.3 have this Issue solved
Credits
Credit to Luke Rodgers for reporting
Пакеты
Наименование
openmage/magento-lts
composer
Затронутые версииВерсия исправления
< 19.4.8
19.4.8
Наименование
openmage/magento-lts
composer
Затронутые версииВерсия исправления
>= 20.0.0, < 20.0.4
20.0.4
Связанные уязвимости
CVSS3: 8
nvd
больше 5 лет назад
In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product. The issue is patched in versions 19.4.8 and 20.0.4.