PT-2024-40011 · Magento+1 · Magento 1+1
Published
2024-05-15
·
Updated
2024-05-15
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions
Zend Framework 1 (affected versions not specified)
Magento 1 (affected versions not specified)
Description
The issue allows for remote code execution and is considered critical, although few systems are affected. To be vulnerable, the installation must use sendmail as the mail transport agent and have specific, non-default configuration settings.
Recommendations
For Zend Framework 1, update the library to prevent remote code execution.
For Magento 1, apply the specific, non-default configuration settings as described to mitigate the risk.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Magento 1
Zend Framework 1