CVE-2024-41676 - CVE House

Back to Database

Status published Medium CVE-2024-41676

Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs

4.1 CVSS

Vulnerability Description

Magento-lts is a long-term support alternative to Magento Community Edition (CE). This XSS vulnerability affects the design/header/welcome, design/header/logo_src, design/header/logo_src_small, and design/header/logo_alt system configs.They are intended to enable admins to set a text in the two cases, and to define an image url for the other two cases. But because of previously missing escaping allowed to input arbitrary html and as a consequence also arbitrary JavaScript. The problem is patched with Version 20.10.1 or higher.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-41676

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from OpenMage

View All →

OpenMage is vulnerable to XSS in Admin Notifications

Magento vulnerable to stored XSS in theme config fields

Magento LTS's guest order "protect code" can be brute-forced too easily

OpenMage LTS has DoS vulnerability in MaliciousCode filter

OpenMage LTS DataFlow upload remote code execution vulnerability

Affected Vendor

OpenMage

View all reports →

Affected Software

magento-lts

Vulnerable Versions:

< 20.10.1

Timeline

Official Publish: July 29th, 2024

Last Modified: August 2nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1189 Drive-by Compromise

T1059.007 JavaScript

T1539 Steal Web Session Cookie

T1213 Data from Information Repositories

T1567 Exfiltration Over Web Service

T1491.001 Defacement