Lucene search
GoogleOSV:GHSA-QPC8-M2XM-9W75HistoryMay 24, 2022 - 5:00 p.m.
Magento Remote code execution through catalog attribute sets
2022-05-2417:00:30
Google
osv.dev
4
In Magento Open Source prior to 1.9.4.3, and Magento Commerce prior to 1.14.4.3, an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through custom layout modification.
Related
github
github
Magento Remote code execution through catalog attribute sets
2022-05-24 17:00:30
cve
cve
CVE-2019-8231
2019-11-06 00:15:13
prion
prion
Design/Logic Flaw
2019-11-06 00:15:00
nvd
nvd
CVE-2019-8231
2019-11-06 00:15:13
cvelist
cvelist
CVE-2019-8231
2019-11-05 23:56:33