CVE-2020-26295CWE-22CWE-434

CMS Editor code execution

High · published January 21, 2021

CVSS v3.1
8.7
EPSS
2%
Percentile
78.4
In the wild
Unconfirmed
What it is

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, an administrator with permission to import/export data and to edit cms pages was able to inject an executable file on the server via layout xml. The latest OpenMage Versions up from 19.4.9 and 20.0.5 have this Issue solved

The record
Technical detail
CVSS v3.1
8.7 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01803 · 78.4th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2021-01-21T13:40Z
EPSS history
Timeline
  • 21 JAN 13:40Z
    CMS Editor code execution
    cvelistv5