Packagist/dweeves/magmi CVE-2015-2068: medium, EPSS 14.04%
MAGMI cross-site scripting (XSS)
Action: Upgrade dweeves/magmi to 0.7.22 or later.
composer require dweeves/magmi:0.7.22Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.22 | - |
Fixed versions
| 0.7.22 |
Sources
- osv: GHSA-27v2-398x-f74x
- https://nvd.nist.gov/vuln/detail/CVE-2015-2068
- https://github.com/dweeves/magmi-git
- http://packetstormsecurity.com/files/130250/Magento-Server-MAGMI-Cross-Site-Scripting-Local-File-Inclusion.html
- http://www.exploit-db.com/exploits/35996
- http://www.securityfocus.com/bid/74879
CVE-2015-2068 · published · modified · JSON