Magento Upward Connector vulnerabilities

1 known vulnerability affecting magento/upward_connector.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2021-21064MEDIUMCVSS 4.9≤ 1.1.22021-02-25

CVE-2021-21064 [MEDIUM] CWE-22 CVE-2021-21064: Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Mage Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which allows reading arbitrary files from the remote serv