Lucene search

[email protected]NVD:CVE-2019-8090

HistoryNov 05, 2019 - 10:15 p.m.

CVE-2019-8090

2019-11-0522:15:14

[email protected]

web.nvd.nist.gov

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

JSON

An arbitrary file deletion vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated users can manipulate the design layout update feature.

Affected configurations

NVD

Node

magentomagentoRange2.1.0–2.1.19commerce

magentomagentoRange2.1.0–2.1.19open_source

magentomagentoRange2.2.0–2.2.10commerce

magentomagentoRange2.2.0–2.2.10open_source

magentomagentoRange2.3.0–2.3.2commerce

magentomagentoRange2.3.0–2.3.2open_source

magentomagentoMatch2.3.2-commerce

magentomagentoMatch2.3.2-open_source

References

magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

JSON

Related for NVD:CVE-2019-8090

prion1 cvelist1 github1 osv2 friendsofphp1 cve1 openvas1