Skip to content
Sign in
Not rated

CVE-2020-5776 Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens

Description

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.

Affected products and versions

Product Affected versions Fixed in
MAGMI Versions not published

Other CVEs of MAGMI

The 2 CVEs of MAGMI →
CVE-2020-5777 MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in… Not rated
Track this CVE