GHSA-jrgf-vfw2-hj26
RCE via PHP Object injection via SOAP Requests
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | openmage/magento-lts | < 19.4.8 | 19.4.8 |
| Packagist | openmage/magento-lts | >= 20.0.0, < 20.0.4 | 20.0.4 |
Details
As written in the advisory (Markdown source, shown as plain text).
### Impact
This vulnerability allows an admin user to generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product.
### Patches
The latest OpenMage Versions up from 19.4.7 and 20.0.3 have this Issue solved
### Credits
Credit to Luke Rodgers for reporting
References
External links from the advisory. They lead to third-party sites.