CVE-2023-23617: falha de média gravidade em OpenMage magento-lts
OpenMage LTS has DoS vulnerability in MaliciousCode filter
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.9epss 1.0%
OpenMage LTS is an e-commerce platform. Versions prior to 19.4.22 and 20.0.19 contain an infinite loop in malicious code filter in certain conditions. Versions 19.4.22 and 20.0.19 have a fix for this issue. There are no known workarounds.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
OpenMage · magento-ltsCVEs relacionadas — OpenMage magento-lts
No mesmo produto, das mais perigosas para as menos.
CVE-2020-26285HIGHWidget instances allows a hacker to inject an executable file on the server on OpenMageEPSS 3.7%CVE-2020-26295HIGHCMS Editor code executionEPSS 2.2%CVE-2020-26252HIGHLayout XML RCE Vulnerability in OpenMageEPSS 2.1%CVE-2021-32758HIGHLayout XML Arbitrary Code FixEPSS 2.0%CVE-2021-32759HIGHData Flow Sanitation Issue FixEPSS 1.8%CVE-2021-39217HIGHOpenMage LTS arbitrary command execution in custom layout update through blocksEPSS 1.4%