~ / search / GHSA-q8cr-xphm-7gfv

GHSA-q8cr-xphm-7gfv

Akeneo PIM vulnerable to shell injection in the mass edition

Source: GitHub Advisory Database (reviewed) Critical CVE-2017-1000009

Packages

EcosystemPackageAffectedFixed in
Packagist akeneo/pim-community-dev >= 1.4, < 1.4.28 1.4.28
Packagist akeneo/pim-community-dev >= 1.5, < 1.5.15 1.5.15
Packagist akeneo/pim-community-dev >= 1.6, < 1.6.6 1.6.6

Details

As written in the advisory (Markdown source, shown as plain text).

Akeneo PIM CE and EE <1.6.6, <1.5.15, <1.4.28 are vulnerable to shell injection in the mass edition, resulting in remote execution.

References

External links from the advisory. They lead to third-party sites.