Exploit Report

Computer Security And Bug Information

CVE-2021-41144

CVECVE-2021-41144
CVE Ordinal Value216998
Published Date2023-01-27T19:15Z
Modified Date2023-01-27T19:31Z
CWE TypeCWE-77
DescriptionOpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, a layout block was able to bypass the block blacklist to execute remote code. Versions 19.4.22 and 20.0.19 contain a patch for this issue.
References
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://github.com/OpenMage/magento-lts/security/advisories/GHSA-5j2g-3ph4-rgvm
Reference DescriptionMISC https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5j2g-3ph4-rgvm
Reference URLhttps://github.com/OpenMage/magento-lts/releases/tag/v19.4.22
Reference DescriptionMISC https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22
Reference URLhttps://github.com/OpenMage/magento-lts/releases/tag/v20.0.19
Reference DescriptionMISC https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19
Reference URLhttps://github.com/OpenMage/magento-lts/commit/06c45940ba3256cdfc9feea12a3c0ca56d23acf8
Reference DescriptionMISC https://github.com/OpenMage/magento-lts/commit/06c45940ba3256cdfc9feea12a3c0ca56d23acf8
Sources NIST MITRE
Note
  • No CVSS data for this CVE

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles