Описание
OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin users to execute arbitrary commands via block methods. The latest OpenMage Versions up from v19.4.15 and v20.0.11 have this Issue patched.
Ссылки
- Release NotesThird Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
- Release NotesThird Party Advisory
- Release NotesThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 19.4.15 (исключая)Версия от 20.0.00 (включая) до 20.0.11 (исключая)
Одно из
cpe:2.3:a:openmage:openmage:*:*:*:*:lts:*:*:*
cpe:2.3:a:openmage:openmage:*:*:*:*:lts:*:*:*
EPSS
Процентиль: 58%
0.0036
Низкий
7.2 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-91
Связанные уязвимости
EPSS
Процентиль: 58%
0.0036
Низкий
7.2 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-91