Threats tagged 'ghsa-g7pm-86px-8gv6'

OpenMage magento-lts versions before 20.18.2 and 21.x before 21.0.0-beta3 have a vulnerability in OAuth 1.0a callback URL validation. The software uses a string-prefix check and falls back to accepting any well-formed URL, allowing attackers with leaked consumer keys and secrets to manipulate callback URLs. This enables capturing of request tokens and verifiers from administrators or customers, potentially leading to unauthorized access tokens with victim API privileges.