PT-2021-11232 · Openmage · Openmage

Published 2021-01-21 · Updated 2021-01-28 · CVE-2020-26285

Positive Technologies (AI Summary)

CVSS v3.1

8.7

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions: OpenMage versions prior to 19.4.10 OpenMage versions prior to 20.0.5

Description: OpenMage is a community-driven alternative to Magento CE. The issue enables remote code execution. An administrator with permission to import/export data and to create widget instances was able to inject an executable file on the server.

Recommendations: For versions prior to 19.4.10, update to version 19.4.10 or later. For versions prior to 20.0.5, update to version 20.0.5 or later.

Fix

Unrestricted File Upload

Path traversal

Weakness Enumeration

CWE-434

CWE-22

Related Identifiers

CVE-2020-26285

GHSA-HJ6W-XRV3-WJJ9

Affected Products

Openmage

References · 8

• https://github.com/OpenMage/magento-lts/commit/4132668f5009f17456fe644742026f56d2297586 · Patch
• https://osv.dev/vulnerability/CVE-2020-26285 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26285 · Security Note
• https://github.com/OpenMage/magento-lts/releases/tag/v19.4.10 · Note
• https://github.com/OpenMage/magento-lts/security/advisories/GHSA-hj6w-xrv3-wjj9 · Note
• https://t.me/cvenotify/8824 · Telegram Post
• https://t.me/cvenotify/8817 · Telegram Post
• https://t.me/cibsecurity/22488 · Telegram Post