-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability relates to unsafe email template manipulation (PRODSECBUG-2275) where unserialize of untrusted data was likely involved. The Filter class handles template processing, and historical Magento vulnerabilities in this component have involved insecure unserialize operations. The advisory's focus on 'underlying model alterations' and CWE-74 (Injection) strongly suggests unsafe deserialization via email template parameters was the vector.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| magento/community-edition | composer | >= 2.1.0, < 2.1.18 | 2.1.18 |
| magento/community-edition | composer | >= 2.2.0, < 2.2.9 | 2.2.9 |
| magento/community-edition | composer | >= 2.3.0, < 2.3.2 | 2.3.2 |
PHPPHPOngoing coverage of React2Shell