CVE-2020-26252: high-severity vulnerability in OpenMage magento-lts
Layout XML RCE Vulnerability in OpenMage
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8.7epss 2.1%
OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.6, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to update product data to be able to store an executable file on the server and load it via layout xml. The latest OpenMage Versions up from 19.4.10 and 20.0.6 have this issue solved.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Affected products
OpenMage · magento-ltsRelated CVEs — OpenMage magento-lts
In the same product, most dangerous first.
CVE-2020-26285HIGHWidget instances allows a hacker to inject an executable file on the server on OpenMageEPSS 3.7%CVE-2020-26295HIGHCMS Editor code executionEPSS 2.2%CVE-2021-32758HIGHLayout XML Arbitrary Code FixEPSS 2.0%CVE-2021-32759HIGHData Flow Sanitation Issue FixEPSS 1.8%CVE-2021-39217HIGHOpenMage LTS arbitrary command execution in custom layout update through blocksEPSS 1.4%CVE-2021-41143HIGHOpenMage LTS arbitrary file deletion in customer media allows for remote code executionEPSS 1.3%