RCE via PHP Object injection via SOAP Requests
ImpactThis vulnerability allows an admin user to generate soap credentials that can be used to trigger RCE via PHP Object Injection through product attributes and a product.PatchesThe latest OpenMage Versions up from 19.4.7 and 20.0.3 have this Issue solvedCreditsCredit to Luke Rodgers for reporting