Lucene search

K
osvGoogleOSV:CVE-2019-7859
HistoryAug 02, 2019 - 10:15 p.m.

CVE-2019-7859

2019-08-0222:15:15
Google
osv.dev
1

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%

A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in unauthorized access to uploaded images due to insufficient access control.

6.6 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.7%