SUPEE-6482

SUPEE-6482 is a bundle of patches that resolve several security issues, including Remote File Inclusion and Remote Code execution. You can find more details on the vulnerabilities address by this patch below:

SSRF Vulnerability in WSDL file – APPSEC-1020
Type:	Remote File Inclusion
CVSSv3 Severity:	5.3 (Medium)
Known Attacks:	None
Description:	Incorrect encoding of API password can lead to probing internal network resources or remote file inclusion.
Product(s) Affected:	Magento CE prior to 1.9.2.1, and Magento EE prior to 1.14.2.1
Fixed In:	CE 1.9.2.1, EE 1.14.2.1
Reporter:	Matthew Barry

Autoloaded File Inclusion in Magento SOAP API – APPSEC-1019
Type:	Remote Code Execution (RCE)
CVSSv3 Severity:	6.5 (Medium)
Known Attacks:	None
Description:	Incorrect validation of a SOAP API request makes it possible to autoload code. The exploit requires the attacker to first log in with API credentials. Depending on the PHP version and/or configuration settings, code can then be loaded from a remote location.
Product(s) Affected:	Magento CE prior to 1.9.2.1, and Magento EE prior to 1.14.2.1
Fixed In:	CE 1.9.2.1, EE 1.14.2.1
Reporter:	Egidio Danilo Romano

  For Magento Enterprise Edition Only:

Cross-site Scripting/Cache Poisoning – APPSEC-1030
Type:	Cross-site Scripting (XSS) – Stored / Cache Poisoning
CVSSv3 Severity:	9.3 (Critical)
Known Attacks:	None
Description:	Unvalidated host header leaks into response and page. Because the page can be cached, this leak poses a risk for all store customers because any HTML or JavaScript code can be injected. Such an exploit works only with specific server configurations, and allows an attacker to intercept a session or modify a page with fake credit card forms, etc.
Product(s) Affected:	Magento EE prior to 1.14.2.1
Fixed In:	EE 1.14.2.1
Reporter:	Internal (ECG)

Cross-site Scripting in Gift Registry Search – APPSEC-1022
Type:	Cross-site Scripting (XSS) – Reflected
CVSSv3 Severity:	9.3 (Critical)
Known Attacks:	None
Description:	Cross-site scripting vulnerability affects registered users. Attack through unescaped search parameter. Risk of cookie theft and impersonating as the user.
Product(s) Affected:	Magento EE prior to 1.14.2.1
Fixed In:	EE 1.14.2.1
Reporter:	Hannes Karlsson/Vaimo