CVE-2020-5776

Published: 2020-09-01T21:15Z

Last Modified: 2024-11-21T05:34Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt