Threats tagged 'ghsa-grm4-x98c-43rp'

A vulnerability in OpenMage magento-lts versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 allows restricted administrators with access to Transactional Emails to read decrypted configuration secrets. This occurs because the store.getConfig email template directive's encrypted-path check fails to cover certain config.xml-declared paths, case variants of the getConfig method, and parent paths. Exploiting this flaw enables exposure of sensitive credentials such as PayPal, payment gateway, and carrier information.