CVE-2021-41143 - OpenCVE

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Openmage	Magento

Configuration 1 [-]

OR	cpe:2.3:a:openmage:magento:::::lts:::*
	cpe:2.3:a:openmage:magento:::::lts:::*

No data.

References

Link	Providers
https://github.com/OpenMage/magento-lts/commit/45330ff50439984e806992fa22c3f96c4d660f91
https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22
https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19
https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5vpv-xmcj-9q85

History

No history.

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2023-01-27T18:02:08.763Z

Updated: 2024-08-04T02:59:31.758Z

Reserved: 2021-09-15T18:43:17.245Z

Link: CVE-2021-41143

Vulnrichment

No data.

NVD

Status : Modified

Published: 2023-01-27T19:15:09.377

Modified: 2023-11-07T03:38:51.270

Link: CVE-2021-41143

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2021-41143", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2021-09-15T18:43:17.245Z", "datePublished": "2023-01-27T18:02:08.763Z", "dateUpdated": "2024-08-04T02:59:31.758Z"}, "containers": {"cna": {"title": "OpenMage LTS arbitrary file deletion in customer media allows for remote code execution", "problemTypes": [{"descriptions": [{"cweId": "CWE-77", "lang": "en", "description": "CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "references": [{"name": "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5vpv-xmcj-9q85", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5vpv-xmcj-9q85"}, {"name": "https://github.com/OpenMage/magento-lts/commit/45330ff50439984e806992fa22c3f96c4d660f91", "tags": ["x_refsource_MISC"], "url": "https://github.com/OpenMage/magento-lts/commit/45330ff50439984e806992fa22c3f96c4d660f91"}, {"name": "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22", "tags": ["x_refsource_MISC"], "url": "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22"}, {"name": "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19", "tags": ["x_refsource_MISC"], "url": "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19"}], "affected": [{"vendor": "OpenMage", "product": "magento-lts", "versions": [{"version": "< 19.4.22", "status": "affected"}, {"version": ">= 20.0.0, < 20.0.19", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2023-01-27T18:02:08.763Z"}, "descriptions": [{"lang": "en", "value": "OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue.\n\n"}], "source": {"advisory": "GHSA-5vpv-xmcj-9q85", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T02:59:31.758Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5vpv-xmcj-9q85", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5vpv-xmcj-9q85"}, {"name": "https://github.com/OpenMage/magento-lts/commit/45330ff50439984e806992fa22c3f96c4d660f91", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/OpenMage/magento-lts/commit/45330ff50439984e806992fa22c3f96c4d660f91"}, {"name": "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22"}, {"name": "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19"}]}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*", "matchCriteriaId": "B87F8CA0-6C21-4615-A520-39F1E9E737D5", "versionEndExcluding": "19.4.22", "vulnerable": true}, {"criteria": "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*", "matchCriteriaId": "15B9BC3F-BF81-4DF5-B57B-ECF7059A7991", "versionEndExcluding": "20.0.19", "versionStartIncluding": "20.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue.\n\n"}, {"lang": "es", "value": "OpenMage LTS es una plataforma de comercio electr\u00f3nico. Antes de las versiones 19.4.22 y 20.0.19, los usuarios administradores de Magento con acceso a los medios del cliente pod\u00edan ejecutar c\u00f3digo en el servidor. Las versiones 19.4.22 y 20.0.19 contienen un parche para este problema."}], "id": "CVE-2021-41143", "lastModified": "2023-11-07T03:38:51.270", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2023-01-27T19:15:09.377", "references": [{"source": "security-advisories@github.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/OpenMage/magento-lts/commit/45330ff50439984e806992fa22c3f96c4d660f91"}, {"source": "security-advisories@github.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/OpenMage/magento-lts/releases/tag/v19.4.22"}, {"source": "security-advisories@github.com", "tags": ["Release Notes", "Third Party Advisory"], "url": "https://github.com/OpenMage/magento-lts/releases/tag/v20.0.19"}, {"source": "security-advisories@github.com", "tags": ["Third Party Advisory"], "url": "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-5vpv-xmcj-9q85"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-77"}], "source": "security-advisories@github.com", "type": "Secondary"}]}