Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Magento Subscribe
Filtered by product Upward Connector
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-21064 1 Magento 2 Upward Connector, Upward Php 2021-03-02 4.0 MEDIUM 4.9 MEDIUM
Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which allows reading arbitrary files from the remote server. Access to the admin console is required for successful exploitation.