CVE-2021-32759CWE-20

Data Flow Sanitation Issue Fix

High · published August 27, 2021

CVSS v3.1
7.2
EPSS
1%
Percentile
71.0
In the wild
Unconfirmed
What it is

OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in versions prior to 19.4.15 and 20.0.13, it was possible for admin users to upload arbitrary executable files to the server. OpenMage versions 19.4.15 and 20.0.13 have a patch for this Issue.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01336 · 71.0th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2021-08-27T22:00Z
EPSS history
Timeline
  • 27 AUG 22:00Z
    Data Flow Sanitation Issue Fix
    cvelistv5