Lucene search

K
osvGoogleOSV:CVE-2019-8156
HistoryNov 06, 2019 - 1:15 a.m.

CVE-2019-8156

2019-11-0601:15:25
Google
osv.dev
2

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.8%

A server-side request forgery (SSRF) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with admin privileges to modify store configurations can manipulate the connector api endpoint to enable remote code execution.

7.4 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

64.8%