CVE-2021-41144: Authenticated Remote Code Execution in openmage/magento-lts
Summary
CVE-2021-41144: Fix for authenticated remote code execution through layout update. Affects openmage/magento-lts across 2 version ranges.
< 19.4.22
>= 20.0.0, < 20.0.19
Fixed in 19.4.22 or 20.0.19, depending on the release line you run. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
openmage/magento-lts is an open-source package available on Packagist. It is a long-term support (LTS) version of Magento, a popular e-commerce platform. This package provides various features and functionalities for building and managing online stores. However, a vulnerability has been discovered in the package that allows authenticated remote code execution through a layout update.
Vulnerability Detail
The vulnerability in openmage/magento-lts allows a layout block to bypass the block blacklist and execute remote code. This means that an attacker with authenticated access to the affected system can exploit this vulnerability to execute arbitrary code, potentially leading to unauthorized access, data breaches, or further compromise of the system. The vulnerability has a CVSS score of 8.8, indicating a high severity level.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 19.4.2219.4.22composer require openmage/magento-lts:19.4.22 -
>= 20.0.0, < 20.0.1920.0.19composer require openmage/magento-lts:20.0.19
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is essential to update the package to the fixed versions as soon as possible.
Conclusion
The openmage/magento-lts package is vulnerable to an authenticated remote code execution vulnerability. It is crucial to update the package to the fixed versions to mitigate the risk of unauthorized access and potential data breaches. For more information and assistance with vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for openmage/magento-lts →
FAQ
The vulnerability allows authenticated attackers to execute remote code, potentially leading to unauthorized access, data breaches, or further compromise of the system.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. It analyzes your composer.lock file and provides real-time alerts for open-source vulnerabilities.
No, there is no known workaround for this vulnerability. It is crucial to update the openmage/magento-lts package to the fixed versions.
The CVSS score of this vulnerability is 8.8, indicating a high severity level.
For further support on vulnerability remediation, you can contact info@devnack.com.
References
Related vulnerabilities
Recent vulnerabilities recorded for openmage/magento-lts.
