Lucene search

K
osvGoogleOSV:GHSA-7GPV-XRJR-F5H4
HistoryMay 24, 2022 - 7:06 p.m.

Magento Path Traversal vulnerability

2022-05-2419:06:24
Google
osv.dev
4
magento
path traversal
vulnerability
child theme
arbitrary file system write
authenticated attacker
admin console.

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

59.0%

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Path Traversal vulnerability when creating a store with child theme.Successful exploitation could lead to arbitrary file system write by an authenticated attacker. Access to the admin console is required for successful exploitation.

AI Score

6.6

Confidence

Low

EPSS

0.002

Percentile

59.0%

Related for OSV:GHSA-7GPV-XRJR-F5H4