6.6 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
58.7%
A path traversal vulnerability in the WYSIWYG editor for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2 could result in unauthorized access to uploaded images due to insufficient access control.
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-24