Read the docs

Magmi Project

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Magmi Project records in CISA KEV

No Magmi Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Magmi 6 records MEDIUM

Records

6 records

TI-2020-04705 CVE-2020-5777 · GHSA-g475-pch5-6wvv

Improper authentication in MAGMI

Priority MEDIUM 62

MAGMI versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.23303 Published 2020-09-01 Fixed in 0.7.24 CWE-287
TI-2020-04704 CVE-2020-5776 · GHSA-cv7m-wc7g-7gfp

Cross-site request forgery in MAGMI

Priority MEDIUM 54

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.14725 Published 2020-09-01 No fix listed CWE-352
TI-2014-07198 CVE-2014-8770 · GHSA-x3gh-95p8-43qv

Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento…

Priority MEDIUM 48

Unrestricted file upload vulnerability in magmi/web/magmi.php in the MAGMI (aka Magento Mass Importer) plugin 0.7.17a and earlier for Magento Community Edition (CE) allows remote authenticated users to execute arbitrary…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.06537 Published 2014-11-13 No fix listed CWE-94
TI-2015-01855 CVE-2015-2068 · GHSA-27v2-398x-f74x

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass…

Priority LOW 35

Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackers to inject arbitrary web script or HTML via the (1) profile parameter to web/ma…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.1404 Published 2015-02-24 Fixed in 0.7.22 CWE-79
Open these records in search →