Lucene search
GoogleOSV:GHSA-JHVH-MJFG-5M99HistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition RCE Vulnerability
2022-05-2416:52:26
Google
osv.dev
4
0.003 Low
EPSS
Percentile
66.2%
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to email templates can execute arbitrary code by previewing a malicious template.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7903.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
nvd.nist.gov/vuln/detail/CVE-2019-7903
web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
Related
prion
prion
Remote code execution
2019-08-02 22:15:00
veracode
veracode
Remote Code Execution (RCE)
2019-08-13 06:06:59
nvd
nvd
CVE-2019-7903
2019-08-02 22:15:17
osv
osv
CVE-2019-7903
2019-08-02 22:15:17
friendsofphp
friendsofphp
PRODSECBUG-2306: Remote code execution through crafted email templates
2019-06-25 00:00:00
cve
cve
CVE-2019-7903
2019-08-02 22:15:17
github
github
Magento 2 Community Edition RCE Vulnerability
2022-05-24 16:52:26
cvelist
cvelist
CVE-2019-7903
2019-08-02 21:25:07
openvas
openvas