Magento CMS Multiple Security Vulnerabilities
BID:100869
Info
Magento CMS Multiple Security Vulnerabilities
| Bugtraq ID: | 100869 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 14 2017 12:00AM |
| Updated: | Oct 05 2017 05:01PM |
| Credit: | gwillem,dhln,Jeroen Boersma, Nashcontrol, Boskostan, lleber, Boskostan, fabian, Peter O'Callaghan, jay-d. |
| Vulnerable: |
Magento Magento 1.9.2.4 Magento Magento 1.9.2.3 Magento Magento 1.9.2.2 Magento Magento 1.9.2.1 Magento Magento 1.9.2.0 Magento Magento 1.9.0.1 Magento Magento 1.14.3.4 Magento Magento 1.14.2.3 Magento Magento 1.14.2.0 |
| Not Vulnerable: |
Magento Magento 2.1.9 Magento Magento 2.0.16 Magento Magento 1.9.3.6 Magento Magento 1.14.3.6 |
Discussion
Magento CMS Multiple Security Vulnerabilities
Magento CMS is prone to the following security vulnerabilities.
1. Multiple HTML-injection vulnerabilities
2. Multiple remote-code execution vulnerabilities
3. A directory-traversal vulnerability
4. An arbitrary file upload vulnerability
5. Multiple cross-site request forgery vulnerabilities
6. Multiple information-disclosure vulnerabilities
7. A security-bypass vulnerability
Attackers can exploit these issues to steal cookie-based authentication credentials, to execute arbitrary scripts in the context of the web browser, or to execute arbitrary code in the context of the affected application, disclose sensitive information, elevate privileges, upload arbitrary files and to bypass certain security restrictions and perform unauthorized actions.
Magento CMS is prone to the following security vulnerabilities.
1. Multiple HTML-injection vulnerabilities
2. Multiple remote-code execution vulnerabilities
3. A directory-traversal vulnerability
4. An arbitrary file upload vulnerability
5. Multiple cross-site request forgery vulnerabilities
6. Multiple information-disclosure vulnerabilities
7. A security-bypass vulnerability
Attackers can exploit these issues to steal cookie-based authentication credentials, to execute arbitrary scripts in the context of the web browser, or to execute arbitrary code in the context of the affected application, disclose sensitive information, elevate privileges, upload arbitrary files and to bypass certain security restrictions and perform unauthorized actions.
Solution / Fix
Magento CMS Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Magento CMS Multiple Security Vulnerabilities
References:
References:
- Magento Homepage (Magento)
- Magento CSRF, Stored Cross Site Scripting (Defensecode)
- Magento CSRF, Stored Cross Site Scripting (Defensecode)
- SUPEE-10266 (Magento)