Data Flow Sanitation Issue Fix · CVE-2021-32759 · GitHub Advisory Database · GitHub

Data Flow Sanitation Issue Fix

High severity GitHub Reviewed Published Aug 27, 2021 in OpenMage/magento-lts • Updated Feb 1, 2023

Package

openmage/magento-lts (Composer)

Affected versions

< 19.4.15

>= 20.0.0, < 20.0.13

Patched versions

19.4.15

20.0.13

Description

Impact

Due to missing sanitation in data flow it was possible for admin users to upload arbitrary executable files to the server.

References

mark-netalico published to OpenMage/magento-lts

Aug 27, 2021

Published by the National Vulnerability Database

Aug 27, 2021

Reviewed Aug 30, 2021

Published to the GitHub Advisory Database Aug 30, 2021

Last updated Feb 1, 2023