Lucene search

Information disclosure through processing of external XML entities

🗓️ 12 Nov 2019 22:24:59Reported by GitHub Advisory DatabaseType

XML entity injection vulnerability in Magento 2.2/2.3 versions leading to information disclosur

Reporter	Title	Published	Views	Family All 8
Prion	Design/Logic Flaw	5 Nov 201923:15	–	prion
Cvelist	CVE-2019-8126	5 Nov 201922:55	–	cvelist
NVD	CVE-2019-8126	5 Nov 201923:15	–	nvd
OSV	Information disclosure through processing of external XML entities	12 Nov 201922:59	–	osv
OSV	CVE-2019-8126	5 Nov 201923:15	–	osv
Friends Of PHP	PRODSECBUG-2440: Information disclosure through processing of external XML entities	8 Oct 201900:00	–	friendsofphp
CVE	CVE-2019-8126	5 Nov 201923:15	–	cve
OpenVAS	Magento 2.2.x < 2.2.10, 2.3.x < 2.3.3 or 2.3.2-p1 Multiple Vulnerabilities (Oct 2019)	7 Nov 201900:00	–	openvas

Vulners

Node

magento community-editionRange2.3–2.3.2-p2

magento community-editionRange2.2–2.2.10

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-8126
magento	www.magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8126.yaml
github	www.github.com/advisories/GHSA-427g-2r83-3ccm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

12 Nov 2019 22:59Current

5Medium risk

Vulners AI Score5

CVSS24

CVSS34.9

EPSS0.001