Vulnerabilities > CVE-2021-39217 - Unspecified vulnerability in Openmage Magento

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

openmage

NVD

Published: 2023-01-27

Updated: 2024-11-21

Summary

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Custom Layout enabled admin users to execute arbitrary commands via block methods. Versions 19.4.22 and 20.0.19 contain patches for this issue.

Vulnerable Configurations

Part	Description	Count
Application	Openmage Openmage Magento 20.0.0 Openmage Magento 20.0.1 Openmage Magento 20.0.2 Openmage Magento 20.0.3 Openmage Magento 20.0.4 Openmage Magento 20.0.5 Openmage Magento 20.0.6 Openmage Magento 20.0.7 Openmage Magento 20.0.8 Openmage Magento 20.0.9 Openmage Magento 20.0.10 Openmage Magento 20.0.11 Openmage Magento 20.0.12 Openmage Magento 20.0.13 Openmage Magento 20.0.14 Openmage Magento 20.0.15 Openmage Magento 20.0.16 Openmage Magento 20.0.17 Openmage Magento 20.0.18 Openmage Magento 1.1.1 Openmage Magento 1.1.2 Openmage Magento 1.1.3 Openmage Magento 1.1.4 Openmage Magento 1.1.5 Openmage Magento 1.1.6 Openmage Magento 1.1.7 Openmage Magento 1.1.8 Openmage Magento 1.2.0 Openmage Magento 1.2.0.1 Openmage Magento 1.2.0.2 Openmage Magento 1.2.0.3 Openmage Magento 1.2.1 Openmage Magento 1.2.1.1 Openmage Magento 1.2.1.2 Openmage Magento 1.3.0 Openmage Magento 1.3.1 Openmage Magento 1.3.1.1 Openmage Magento 1.3.2 Openmage Magento 1.3.2.1 Openmage Magento 1.3.2.2 Openmage Magento 1.3.2.3 Openmage Magento 1.3.2.4 Openmage Magento 1.3.3.0 Openmage Magento 1.4.0.0 Openmage Magento 1.4.0.1 Openmage Magento 1.4.1.0 Openmage Magento 1.4.1.1 Openmage Magento 1.4.2.0 Openmage Magento 1.5.0.0 Openmage Magento 1.5.0.1 Openmage Magento 1.5.1.0 Openmage Magento 1.6.0.0 Openmage Magento 1.6.1.0 Openmage Magento 1.6.2.0 Openmage Magento 1.7.0.0 Openmage Magento 1.7.0.1 Openmage Magento 1.7.0.2 Openmage Magento 1.8.0.0 Openmage Magento 1.8.1.0 Openmage Magento 1.9.0.0 Openmage Magento 1.9.0.1 Openmage Magento 1.9.1.0 Openmage Magento 1.9.1.1 Openmage Magento 19.4.0 Openmage Magento 19.4.1 Openmage Magento 19.4.2 Openmage Magento 19.4.3 Openmage Magento 19.4.4 Openmage Magento 19.4.5 Openmage Magento 19.4.6 Openmage Magento 19.4.7 Openmage Magento 19.4.8 Openmage Magento 19.4.9 Openmage Magento 19.4.10 Openmage Magento 19.4.11 Openmage Magento 19.4.12 Openmage Magento 19.4.13 Openmage Magento 19.4.14 Openmage Magento 19.4.15 Openmage Magento 19.4.16 Openmage Magento 19.4.17 Openmage Magento 19.4.18 Openmage Magento 19.4.19 Openmage Magento 19.4.20 Openmage Magento 19.4.21	110

Summary

Vulnerable Configurations

References