Security Advisory

CVE-2020-26285

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-21 13:30:17

Last updated 2024-08-04 15:56:04

Assigner GitHub_M

State PUBLISHED

Description

OpenMage is a community-driven alternative to Magento CE. In OpenMage before versions 19.4.10 and 20.0.5, there is a vulnerability which enables remote code execution. In affected versions an administrator with permission to import/export data and to create widget instances was able to inject an executable file on the server. The latest OpenMage Versions up from 19.4.9 and 20.0.5 have this Issue solved

← Browse all CVEs View on cve.org ↗