Code Injection in Magento Open Source - #VU18720
Published: June 10, 2019
Vulnerability identifier: #VU18720
CSH Severity: Medium
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: N/A
CWE-ID: CWE-94
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to improper input validation via crafted newsletter and email templates . A remote authenticated attacker with privileges to create newsletter or email templates can send a specially crafted request and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
Magento Open Source
Remediation
Install updates from vendor's website.
Magento Open Source - addressed in versions 2.1.17, 2.2.8, 2.3.1