A vulnerability was found in magmi up to 0.7.24. It has been classified as critical. This affects an unknown functionality of the file /index.php/newsletter/subscriber/new/. The manipulation with an unknown input leads to a cross-site request forgery vulnerability. CWE is classifying the issue as CWE-352. The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.

The weakness was shared 09/01/2020 with Tenable Network Security as TRA-2020-51 as confirmed advisory (Website). It is possible to read the advisory at tenable.com. The vendor cooperated in the coordination of the public release. This vulnerability is uniquely identified as CVE-2020-5776. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known.

After immediately, there has been an exploit disclosed. The exploit is shared for download at github.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 179 days. During that time the estimated underground price was around $0-$5k.

The problem might be mitigated by replacing the product with as an alternative.

Further details are available at tenable.com. The entry VDB-160540 is related to this item. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Name

• magmi

Version

• 0.7.0
• 0.7.1
• 0.7.2
• 0.7.3
• 0.7.4
• 0.7.5
• 0.7.6
• 0.7.7
• 0.7.8
• 0.7.9
• 0.7.10
• 0.7.11
• 0.7.12
• 0.7.13
• 0.7.14
• 0.7.15
• 0.7.16
• 0.7.17
• 0.7.18
• 0.7.19
• 0.7.20
• 0.7.21
• 0.7.22
• 0.7.23
• 0.7.24

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion