Openmage Long Term Support
Approved changes feed: RSS · Atom
cpe:2.3:a:openmage:openmage_long_term_support:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Openmage (372a94cb-47d7-54a2-8396-9b00aa2ee69b) |
|---|---|
| Product | Openmage Long Term Support (08a7b7e7-3cab-53f0-ab4f-59eb6cce0289) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/openmage/magento-lts |
purl2cpe | 2026-06-01 10:14:48.562888 |
pkg:github/openmage/magento-lts |
purl2cpe | 2026-06-01 10:14:48.562890 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-15151 |
vulnerable | 2026-06-08 05:19:25.379003 |
Observable Timing Discrepancy in OpenMage LTS
HIGH (8)
OpenMage LTS before versions 19.4.6 and 20.0.2 allows attackers to circumvent the `fromkey protection` in the Admin Interface and increases the attack surface for Cross Site Request Forgery attacks. This issue is related to Adobe's CVE-2020-9690. It is patched in versions 19.4.6 and 20.0.2.
Published: 2020-08-19T18:10:13.000Z
Updated: 2024-08-04T13:08:22.288Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.