Magento CMS Multiple Security Vulnerabilities
BID:107644
Info
Magento CMS Multiple Security Vulnerabilities
| Bugtraq ID: | 107644 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | No |
| Published: | Mar 26 2019 12:00AM |
| Updated: | Mar 26 2019 12:00AM |
| Credit: | DDV_UA, valis_, Pete O'Callaghan, cfreal, Simon Scannell, Max Chadwick, Kieren Evans, internal, magecraze, craig-gene, Brian LaBelle, Blaklis_, djordje-marjanovic, wiardvanrij, Max Chadwick, Luke Rodgers, Zhouyuan Yang of Fortinet's FortiGuard Labs, boskos |
| Vulnerable: |
Magento Open Source 1.9.4.0 Magento Open Source 1.9.3.9 Magento Open Source 1.9.3.8 Magento Open Source 1.9.3.7 Magento Open Source 1.9.3.6 Magento Open Source 1.9.3.5 Magento Open Source 1.9.3.4 Magento Open Source 1.9.3.3 Magento Open Source 1.9.3.2 Magento Open Source 1.9.3.10 Magento Open Source 1.9.3.1 Magento Open Source 1.9.3.0 Magento Open Source 1.9.2.4 Magento Open Source 1.9.2.3 Magento Open Source 1.9.2.2 Magento Open Source 1.9.2.1 Magento Open Source 1.9.2.0 Magento Open Source 1.9.1.0 Magento Open Source 1.9.0.1 Magento Open Source 1.9.0.0 Magento Magento 2.3 Magento Magento 2.2.7 Magento Magento 2.2.6 Magento Magento 2.2.5 Magento Magento 2.2.4 Magento Magento 2.2.3 Magento Magento 2.2.2 Magento Magento 2.2.1 Magento Magento 2.1.16 Magento Magento 2.1.15 Magento Magento 2.1.14 Magento Magento 2.1.13 Magento Magento 2.1.12 Magento Magento 2.1.11 Magento Magento 2.1.10 Magento Magento 2.1.9 Magento Magento 2.1.8 Magento Magento 2.1.7 Magento Magento 2.1.6 Magento Magento 2.1.5 Magento Magento 2.1.4 Magento Magento 2.1.3 Magento Magento 2.1.2 Magento Magento 2.1.1 Magento Magento 2.2 Magento Commerce 1.14.4.0 Magento Commerce 1.14.3.9 Magento Commerce 1.14.3.8 Magento Commerce 1.14.3.7 Magento Commerce 1.14.3.6 Magento Commerce 1.14.3.5 Magento Commerce 1.14.3.4 Magento Commerce 1.14.3.3 Magento Commerce 1.14.3.2 Magento Commerce 1.14.3.10 Magento Commerce 1.14.3.1 Magento Commerce 1.14.3.0 Magento Commerce 1.14.2.0 Magento Commerce 1.14.1.0 Magento Commerce 1.14.0.1 |
| Not Vulnerable: |
Magento Open Source 1.9.4.1 Magento Magento 2.3.1 Magento Magento 2.2.8 Magento Magento 2.1.17 Magento Commerce 1.14.4.1 |
Discussion
Magento CMS Multiple Security Vulnerabilities
Magento CMS is prone to the following security vulnerabilities.
1. Multiple HTML-injection vulnerabilities
2. Multiple remote code execution vulnerabilities
3. Multiple cross-site scripting vulnerabilities
4. An information-disclosure vulnerability
5. An authorization-bypass vulnerability
6. An Authentication-bypass vulnerability
An attacker may leverage these issues to gain unauthorized access, obtain potentially sensitive information, bypass the authentication mechanism and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Magento CMS is prone to the following security vulnerabilities.
1. Multiple HTML-injection vulnerabilities
2. Multiple remote code execution vulnerabilities
3. Multiple cross-site scripting vulnerabilities
4. An information-disclosure vulnerability
5. An authorization-bypass vulnerability
6. An Authentication-bypass vulnerability
An attacker may leverage these issues to gain unauthorized access, obtain potentially sensitive information, bypass the authentication mechanism and execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Exploit / POC
Magento CMS Multiple Security Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]