Lucene search
GoogleOSV:GHSA-VVF9-FXHV-4RGJHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition RCE
2022-05-2416:52:28
Google
osv.dev
13
0.003 Low
EPSS
Percentile
66.2%
A remote code execution vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with admin privileges to create or edit a product can execute arbitrary code via malicious XML layout updates.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7942.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
nvd.nist.gov/vuln/detail/CVE-2019-7942
web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
Related
veracode
veracode
Remote Code Execution (RCE)
2019-08-08 01:55:04
github
github
Magento 2 Community Edition RCE
2022-05-24 16:52:28
nvd
nvd
CVE-2019-7942
2019-08-02 22:15:19
cve
cve
CVE-2019-7942
2019-08-02 22:15:19
osv
osv
CVE-2019-7942
2019-08-02 22:15:19
cvelist
cvelist
CVE-2019-7942
2019-08-02 21:34:07
prion
prion
Remote code execution
2019-08-02 22:15:00
friendsofphp
friendsofphp
PRODSECBUG-2375: Arbitrary code execution via malicious XML layouts
2019-06-25 00:00:00
openvas
openvas