HIGH

CVE-2020-5776

CVSS v3

8.8

HIGH

EPSS Score

79.7%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.

Technical details

Published
9/1/2020

Frequently asked questions

What is CVE-2020-5776?

Currently, all versions of MAGMI are vulnerable to CSRF due to the lack of CSRF tokens. RCE (via phpcli command) is possible in the event that a CSRF is leveraged against an existing admin session for MAGMI.

Is CVE-2020-5776 actively exploited?

Active exploitation of CVE-2020-5776 has not been confirmed. The EPSS score is 79.7%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-5776?

CVE-2020-5776 has a CVSS v3 base score of 8.8 (HIGH severity).

Is CVE-2020-5776 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.