CVE-2020-5776

HIGHNuclei

Cross-Site Request Forgery in MAGMI

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2020-5776 has a selected CVSS score of 8.8 (high); EIP currently links 1 Nuclei template.

Description

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Jun 1, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

Affected products and versions

3
ProductSourceVersion range

magmi

Browse magmi_project / magmi
VulnCheckVersion data not supplied

MAGMI

CVE ListAll versions of MAGMIaffected

dweeves/magmi

Browse Packagist / dweeves/magmi
GitHub AdvisoryThrough 0.7.24affected

Nuclei templates

1
ProjectDiscoveryHIGHMAGMI - Cross-Site Request ForgeryCVSS 8.8

MAGMI (Magento Mass Importer) is vulnerable to cross-site request forgery (CSRF) due to a lack of CSRF tokens. Remote code execution (via phpcli command) is also possible in the event that CSRF is leveraged against an existing admin session.

Impact

Successful exploitation of this vulnerability could allow an attacker to perform unauthorized actions on behalf of the victim user.

Remediation

Implement CSRF protection mechanisms such as anti-CSRF tokens and referer validation.

WeaknessesCWE-352
Authorsdwisiswant0
Template tagscvecve2020magmimagentotenablemagmi_projectvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:magmi_project:magmi:*:*:*:*:*:*:*:*
Shodan: http.component:"Magento"
Shodan: http.component:"magento"
https://www.tenable.com/security/research/tra-2020-51 https://nvd.nist.gov/vuln/detail/CVE-2020-5776 https://github.com/sobinge/nuclei-templates https://github.com/404notf0und/CVE-Flow https://github.com/ARPSyndicate/cvemon

Source: ProjectDiscovery

References

2