Description
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-0439 Vulnerability (CVE-2015-0439)
Oracle Application Server CVE-2008-7233 Vulnerability (CVE-2008-7233)
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2021-21347)
WordPress Plugin On Page SEO + Social Live Chat (Formerly OPS) Cross-Site Scripting (1.0.1)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4279)