CVE-2015-1399
PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary PHP code via a…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 10.0%, higher than 95% of all known CVEs. Patch or mitigate before the next change window.
Description
PHP remote file inclusion vulnerability in the fetchView function in the Mage_Core_Block_Template_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allows remote administrators to execute arbitrary PHP code via a URL in unspecified vectors involving the setScriptPath function. NOTE: it is not clear whether this issue crosses privilege boundaries, since administrators might already have privileges to include arbitrary files.
- CVSS 2.0
- 6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
- EPSS
- 10.00% probability · 95th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- magento/magento
- Source
- cve@mitre.org
References
- http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/Exploit
- http://magento.com/blog/technical/critical-security-advisory-remote-code-execution-rce-vulnerabilityPatch, Vendor Advisory
- http://www.securitytracker.com/id/1032194
- http://blog.checkpoint.com/2015/04/20/analyzing-magento-vulnerability/Exploit
- http://magento.com/blog/technical/critical-security-advisory-remote-code-execution-rce-vulnerabilityPatch, Vendor Advisory
- http://www.securitytracker.com/id/1032194
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.