Lucene search
GoogleOSV:GHSA-7XQV-JGV6-X2H8HistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition XSS Vulnerability
2022-05-2416:52:24
Google
osv.dev
5
0.001 Low
EPSS
Percentile
27.3%
A cross-site scripting mitigation bypass exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user to escalate privileges (admin vs. admin XSS attack).
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7881.yaml
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7881
web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
Related
osv
osv
CVE-2019-7881
2019-08-02 22:15:16
friendsofphp
friendsofphp
github
github
Magento 2 Community Edition XSS Vulnerability
2022-05-24 16:52:24
cvelist
cvelist
CVE-2019-7881
2019-08-02 21:20:04
nvd
nvd
CVE-2019-7881
2019-08-02 22:15:16
cve
cve
CVE-2019-7881
2019-08-02 22:15:16
prion
prion
Cross site scripting
2019-08-02 22:15:00
openvas
openvas