PT-2020-14309
CVE-2020-15244
·
تاريخ النشر
2020-10-21
·
تاريخ التحديث
2021-11-18
الوصف من
CVSS 3.1
8.0
عاليةالمقاييسAV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
magento-lts versions prior to 19.4.8
magento-lts versions prior to 20.0.4
Description
The issue allows an admin user to generate soap credentials that can be used to trigger remote code execution (RCE) via PHP Object Injection through product attributes and a product.
Recommendations
For versions prior to 19.4.8, update to version 19.4.8 or later.
For versions prior to 20.0.4, update to version 20.0.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾