Approved changes feed: RSS · Atom
cpe:2.3:a:openmage:magento:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openmage (372a94cb-47d7-54a2-8396-9b00aa2ee69b) |
|---|---|
| Product | Magento (20b34c99-565f-5268-bd83-7672427b223e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/openmage/magento-lts |
purl2cpe | 2026-06-01 10:14:48.526251 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-32759 |
vulnerable | 2026-06-08 05:32:07.979781 |
Data Flow Sanitation Issue Fix
HIGH (7.2)
OpenMage magento-lts is an alternative to the Magento CE official releases. Due to missing sanitation in data flow in versions prior to 19.4.15 and 20.0.13, it was possible for admin users to upload arbitrary executable files to the server. OpenMage versions 19.4.15 and 20.0.13 have a patch for this Issue.
Published: 2021-08-27T22:00:11.000Z
Updated: 2024-08-03T23:33:55.914Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.