ID CVE-2021-32684
Summary magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec, and logs commands, effectively making them unusable. Version 1.5.3 contains patches for the problems.
References
Vulnerable Configurations
  • cpe:2.3:a:scandipwa:magento-scripts:1.5.1:*:*:*:*:node.js:*:*
    cpe:2.3:a:scandipwa:magento-scripts:1.5.1:*:*:*:*:node.js:*:*
  • cpe:2.3:a:scandipwa:magento-scripts:1.5.2:*:*:*:*:node.js:*:*
    cpe:2.3:a:scandipwa:magento-scripts:1.5.2:*:*:*:*:node.js:*:*
CVSS
Base: 5.0 (as of 29-06-2021 - 15:36)
Impact:
Exploitability:
CWE CWE-670
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
Last major update 29-06-2021 - 15:36
Published 14-06-2021 - 23:15
Last modified 29-06-2021 - 15:36
Back to Top