CVE-2021-41143

 

Published at: - 27-01-2023 08:15

Last modified: - 27-01-2023 08:31

Total changes: - 1

Description

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22
• https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19
• https://github.com/OpenMage/magento-lts/commit/45330ff50439984e806992fa22c3f96c4d660f91
• https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5vpv-xmcj-9q85

 

Keywords

NVD

 

CVE-2021-41143

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures