Lucene search
GoogleOSV:GHSA-9WR9-FW9V-8FGRHistoryMay 24, 2022 - 5:00 p.m.
Magento 2 Community Edition RCE Vulnerability
2022-05-2417:00:27
Google
osv.dev
9
0.002 Low
EPSS
Percentile
64.7%
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user with administrative privileges (system level import) can execute arbitrary code through a Phar deserialization vulnerability in the import functionality.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8141.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
nvd.nist.gov/vuln/detail/CVE-2019-8141
web.archive.org/web/20220121051105/https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
Related
prion
prion
Remote code execution
2019-11-06 00:15:00
cvelist
cvelist
CVE-2019-8141
2019-11-05 23:26:49
nvd
nvd
CVE-2019-8141
2019-11-06 00:15:11
cve
cve
CVE-2019-8141
2019-11-06 00:15:11
osv
osv
CVE-2019-8141
2019-11-06 00:15:11
friendsofphp
friendsofphp
github
github
Magento 2 Community Edition RCE Vulnerability
2022-05-24 17:00:27
openvas
openvas