Description
Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a command injection vulnerability. Successful exploitation could lead to arbitrary code execution.
Remediation
References
Related Vulnerabilities
Apache Tomcat WAR file directory traversal vulnerability
WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.16)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-31549)
Oracle JRE CVE-2013-5797 Vulnerability (CVE-2013-5797)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15695)