CVE-2020-26252CWE-22CWE-434

Layout XML RCE Vulnerability in OpenMage

High · published January 20, 2021

CVSS v3.1
8.7
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server and load it via layout xml. The latest OpenMage Versions up from 19.4.10 and 20.0.6 have this issue solved.

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.02146 · 82.0th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2021-01-20T21:55Z
EPSS history
Timeline
  • 20 JAN 21:55Z
    Layout XML RCE Vulnerability in OpenMage
    cvelistv5