CVE-2020-15244CWE-502CWE-74

RCE in Magento

High · published October 21, 2020

CVSS v3.1
8.0
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

In Magento (rubygems openmage/magento-lts package) before versions 19.4.8 and 20.0.4, an admin user can generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product. The issue is patched in versions 19.4.8 and 20.0.4.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01264 · 69.5th percentile
Weaknesses
CWE-502 · Deserialization of Untrusted Data; CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Published
2020-10-21T20:05Z
EPSS history
Timeline
  • 21 OCT 20:05Z
    RCE in Magento
    cvelistv5