.. / CVE-2020-5777

• Auth Bypass
• Nuclei
• Web

Exploit for Magento Mass Importer <0.7.24 - Remote Auth Bypass (CVE-2020-5777)

Description:

Magento Mass Importer (aka MAGMI) versions prior to 0.7.24 are vulnerable to a remote authentication bypass due to allowing default credentials in the event there is a database connection failure.

Nuclei Template

View the template here CVE-2020-5777.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-5777.yaml

References: