CVE-2021-32758
High
Published: 27 August 2021
Published
27 August 2021
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.0036
58.6th percentile
Risk Priority
15
60% EPSS · 20% KEV · 20% CVSS
Summary
CVE-2021-32758 is a high-severity aka Blind XPath Injection (CWE-91) vulnerability in Openmage Openmage. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 41.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2021-1505
Vulnerability details
OpenMage Magento LTS is an alternative to the Magento CE official releases. Prior to versions 19.4.15 and 20.0.11, layout XML enabled admin users to execute arbitrary commands via block methods. The latest OpenMage Versions up from v19.4.15 and v20.0.11 have…
more
this Issue patched.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
openmage
openmage
≤ 19.4.15 · 20.0.00 — 20.0.11
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.