CVE-2021-32684mediumCWE-670

CVE-2021-32684: medium-severity vulnerability in scandipwa create-magento-app

Missing Handler in @scandipwa/magento-scripts

Published · Updated

Follow this CVE+ Monitor create-magento-app+ Monitor @scandipwa/magento-scripts

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.2epss 0.7%
magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec, and logs commands, effectively making them unusable. Version 1.5.3 contains patches for the problems.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
scandipwa · create-magento-app