CVE-2020-5776

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens

published September 1, 2020

CVSS
—
EPSS
15%
Percentile
96.7
In the wild
Unconfirmed
What it is

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.14725 · 96.7th percentile
Published
2020-09-01T20:34Z
EPSS history
Timeline
  • 01 SEP 20:34Z
    Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens
    cvelistv5