CVE-2015-2068: MAGMI cross-site scripting (XSS)
Summary
CVE-2015-2068: MAGMI cross-site scripting (XSS). Affects dweeves/magmi versions < 0.7.22. Fixed in 0.7.22. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
MAGMI (Magento Mass Importer) is a plugin for Magento Server that facilitates bulk import of data. It provides a convenient way to import large amounts of data into a Magento store. The plugin is widely used by Magento administrators and developers to streamline the data import process. However, MAGMI is susceptible to multiple cross-site scripting (XSS) vulnerabilities, which can allow remote attackers to inject arbitrary web script or HTML into the application.
Vulnerability Detail
The vulnerability in MAGMI arises from two different entry points. The first vulnerability occurs when the 'profile' parameter is not properly sanitized in the 'web/magmi.php' file. An attacker can exploit this by injecting malicious web script or HTML into the parameter, which will be executed when the page is rendered. The second vulnerability is present in the 'QUERY_STRING' parameter of the 'web/magmi_import_run.php' file. By injecting malicious code into this parameter, an attacker can execute arbitrary web script or HTML in the context of the application.
How To Fix
Minimum fixed version
0.7.22
This is the first release that contains the fix.
composer require dweeves/magmi:0.7.22Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If updating the MAGMI plugin is not immediately feasible, you can implement a temporary workaround by manually sanitizing the input parameters in the affected files. This involves validating and filtering the 'profile' parameter in 'web/magmi.php' and the 'QUERY_STRING' parameter in 'web/magmi_import_run.php' to remove any potentially malicious code. Here is an example of how the 'profile' parameter can be sanitized using PHP code:
$profile = filter_input(INPUT_GET, 'profile', FILTER_SANITIZE_STRING);
Conclusion
The MAGMI plugin for Magento Server is vulnerable to cross-site scripting (XSS) attacks. These vulnerabilities can be exploited by injecting malicious web script or HTML into specific parameters. To mitigate the risk, it is recommended to update the MAGMI plugin to version 0.7.22 or later. If immediate updating is not possible, manual sanitization of the input parameters can serve as a temporary workaround. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for dweeves/magmi →
FAQ
MAGMI (Magento Mass Importer) is a plugin for Magento Server that allows bulk import of data into a Magento store. It is commonly used by administrators and developers to streamline the data import process.
Cross-site scripting (XSS) is a type of security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users. This can lead to various attacks, such as stealing sensitive information or performing actions on behalf of the user.
The MAGMI XSS vulnerability can be exploited by injecting malicious web script or HTML into the 'profile' parameter of 'web/magmi.php' or the 'QUERY_STRING' parameter of 'web/magmi_import_run.php'. This allows an attacker to execute arbitrary code in the context of the application.
Yes, the vulnerability can be fixed by updating the MAGMI plugin to version 0.7.22 or later. The updated version includes patches that address the XSS vulnerabilities.
If updating the MAGMI plugin is not immediately feasible, you can manually sanitize the input parameters in the affected files. This involves validating and filtering the 'profile' parameter in 'web/magmi.php' and the 'QUERY_STRING' parameter in 'web/magmi_import_run.php' to remove any potentially malicious code.
Related vulnerabilities
Recent vulnerabilities recorded for dweeves/magmi.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
