← Database

CVE-2021-41143

HIGH CVSS: 7.2 Published: 2023-01-27 Modified: 2026-06-17

Description

OpenMage LTS is an e-commerce platform. Prior to versions 19.4.22 and 20.0.19, Magento admin users with access to the customer media could execute code on the server. Versions 19.4.22 and 20.0.19 contain a patch for this issue.

Affected Platforms

Openmage Magento

Weakness Type

CWE-77, CWE-22

References