CVE-2021-39217

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.22 and 20.0.19 contain patches for this issue.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/OpenMage/magento-lts/commit/289bd4b4f53622138e3e5c2d2cef7502d780086f	Patch Third Party Advisory
https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22	Release Notes Third Party Advisory
https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19	Release Notes Third Party Advisory
https://github.com/OpenMage/magento-lts/security/advisories/GHSA-c9q3-r4rv-mjm7	Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:openmage:magento:::::lts:::*
	cpe:2.3:a:openmage:magento:::::lts:::*

History

No history.

Information

Published : 2023-01-27 18:15

Updated : 2024-02-28 19:51

NVD link : CVE-2021-39217

Mitre link : CVE-2021-39217

CVE.ORG link : CVE-2021-39217

JSON object : View

Products Affected

openmage

magento

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

{"id": "CVE-2021-39217", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}, {"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2023-01-27T18:15:09.087", "references": [{"url": "https://github.com/OpenMage/magento-lts/commit/289bd4b4f53622138e3e5c2d2cef7502d780086f", "tags": ["Patch", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22", "tags": ["Release Notes", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19", "tags": ["Release Notes", "Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-c9q3-r4rv-mjm7", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-77"}]}], "descriptions": [{"lang": "en", "value": "OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.22 and 20.0.19 contain patches for this issue."}, {"lang": "es", "value": "OpenMage LTS es una plataforma de comercio electr\u00f3nico. Antes de las versiones 19.4.22 y 20.0.19, el dise\u00f1o personalizado permit\u00eda a los usuarios administradores ejecutar comandos arbitrarios mediante m\u00e9todos de bloqueo. Las versiones 19.4.22 y 20.0.19 contienen parches para este problema."}], "lastModified": "2023-02-04T01:55:09.817", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "B87F8CA0-6C21-4615-A520-39F1E9E737D5", "versionEndExcluding": "19.4.22"}, {"criteria": "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*", "vulnerable": true, "matchCriteriaId": "15B9BC3F-BF81-4DF5-B57B-ECF7059A7991", "versionEndExcluding": "20.0.19", "versionStartIncluding": "20.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}