CVE-2021-32684
Assigner: GitHub_M
Published: 2021-06-14T23:05:09
State: PUBLISHED
affected: product: create-magento-app
vendor: scandipwa
versions: status: affected
version: >= 1.5.1, <= 1.5.2
descriptions: value: magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec, and logs commands, effectively making them unusable. Version 1.5.3 contains patches for the problems.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 6.2
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-670
description: CWE-670: Always-Incorrect Control Flow Implementation
type: CWE
source: advisory: GHSA-52qp-gwwh-qrg4
discovery: UNKNOWN
title: Missing Handler in @scandipwa/magento-scripts