CVE-2015-1398: Path Traversal
Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote authenticated users to include and execute certain PHP files via (1) .. (dot dot) sequences in the PATHINFO to index.php or (2) vectors involving a block value in the directive parameter to the CmsWysiwyg controller in the Adminhtml module, related to the blockDirective function and the auto loading mechanism. NOTE: vector 2 might not cross privilege boundaries, since administrators might already have the privileges to execute code and upload files.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-1398?
CVE-2015-1398 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2015-1398?
To fix CVE-2015-1398, upgrade your Magento installation to version 1.9.2.0 or later for Community Edition and 1.14.2.0 or later for Enterprise Edition.
Who is affected by CVE-2015-1398?
CVE-2015-1398 affects Magento Community Edition 1.9.1.0 and Enterprise Edition 1.14.1.0.
What can attackers do with CVE-2015-1398?
Attackers exploiting CVE-2015-1398 can include and execute arbitrary PHP files on the affected Magento installations.
Is CVE-2015-1398 a widespread vulnerability?
Yes, CVE-2015-1398 is widespread as it affects multiple versions of widely used Magento software.