Threats tagged 'ghsa-r74m-vw7m-pr6g'

OpenMage magento-lts versions 20.17.0 before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 have an unrestricted file upload vulnerability. The vulnerability arises because the blocklist for protected file extensions does not include phar, php8, and phps files. This allows unauthenticated attackers to upload a .phar file via a product File custom option to a predictable path and execute code on servers that treat .phar files as PHP.