The import/export functionality in Magento unserialized data supplied from the Admin dashboard without proper checks. This could lead to possible code execution if a malicious user has Magento Admin access, even if access is limited to the import/export functionality. Part of patch SUPEE-8788 This vulnerability affects the following application... Weiterlesen: [APPSEC-1375] Remote Code Execution in admin
Intelligence View
⚡ tsecurity.de Intelligence
[APPSEC-1375] Remote Code Execution in admin
The import/export functionality in Magento unserialized data supplied from the Admin dashboard without proper checks. This could lead to possible code…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Noch keine Leser-Bewertungen
War diese Seite hilfreich?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwandte Story-Cluster & Quellen (Vektor-KI)
7 Quellen
CVE-2022-47088 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box buffer overflow (Issue 2340 / EUVD-2022-49864)
6 weitere Quellen
VVulDB Updatesvor 45 Min.CVE-2022-47089 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box media_tools/av_parsers.c gf_vvc_read_sps_bs_internal buffer overflow (Issue 2338 / EUVD-2022-49865) VVulDB Updatesvor 45 Min.CVE-2022-47091 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box filters/load_text.c gf_text_process_sub buffer overflow (Issue 2343 / EUVD-2022-49867) VVulDB Updatesvor 45 Min.CVE-2022-47093 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box filters/dmx_m2ts.c m2tsdmx_declare_pid use after free (Issue 2344 / EUVD-2022-49869) VVulDB Updatesvor 45 Min.CVE-2022-47092 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box media_tools/av_parsers.c gf_hevc_read_sps_bs_internal integer overflow (Issue 2347 / EUVD-2022-49868) VVulDB Updatesvor 45 Min.CVE-2022-47094 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box filters/dmx_m2ts.c m2tsdmx_declare_pid null pointer dereference (Issue 2345 / EUVD-2022-49870) VVulDB Updatesvor 45 Min.CVE-2022-47095 | GPAC 2.1-DEV-rev574-g9d5bb184b MP4box media_tools/av_parsers.c hevc_parse_vps_extension buffer overflow (Issue 2346 / EUVD-2022-49871)
6 Quellen
CVE-2026-6930 | IBM Concert up to 3.0.0 inadequate encryption (EUVD-2026-104488)
5 weitere Quellen
VVulDB Updatesvor 25 Min.CVE-2026-15661 | IBM Concert up to 3.0.0 (EUVD-2026-104487) VVulDB Updatesvor 25 Min.CVE-2026-111061 | Eugeny russh up to 0.64.0 SSH Agent allocation of resources (EUVD-2026-104457) VVulDB Updatesvor 25 Min.CVE-2026-111750 | aio-libs aiohttp up to 3.14.3 Pure Python Parser input validation (EUVD-2026-104486) VVulDB Updatesvor 25 Min.CVE-2026-111749 | aio-libs aiohttp up to 3.14.3 information disclosure (EUVD-2026-104485) VVulDB Updatesvor 25 Min.CVE-2026-12727 | IBM MQ Operator/MQ Advanced container images off-by-one (EUVD-2026-104463)
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/de/4277776/sicherheitsluecken-cve/appsec-1375-remote-code-execution-in-admin/