CVE-2021-32684
Missing Handler in @scandipwa/magento-scripts
- State
- Published
- Severity
- 6.2 Medium
- Published
- Jun 14, 2021
- Updated
- Aug 3, 2024
- Reserved
- May 12, 2021
Description
magento-scripts contains scripts and configuration used by Create Magento App, a zero-configuration tool-chain which allows one to deploy Magento 2. In versions 1.5.1 and 1.5.2, after changing the function from synchronous to asynchronous there wasn't implemented handler in the start, stop, exec, and logs commands, effectively making them unusable. Version 1.5.3 contains patches for the problems.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.2 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | GitHub_M |
Weaknesses
- CWE-670 Always-Incorrect Control Flow Implementation
Affected Products
| Product | Versions |
|---|---|
create-magento-appscandipwa |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.